Please submit an issue or pull request for any noncritical bugs or noncritical vulnerabilities you find.

In case of a responsible disclosure, please follow instructions on https://www.gematik.de/datensicherheit#c1958.