If you find any vulnerability in the osu-tools-api, feel free to open an issue. You can also contact me directly (dev.matthieu.locussol@gmail.com) if you think this issue is critical enough not to be listed on github.