Please report a vulnerability in Pulso privately through GitHub private vulnerability reporting, not in a public issue or pull request. Say which version you ran, on which platform, and how to reproduce the problem.

Nodalia maintains Pulso and handles every report. Only the latest release receives security fixes.