Use a private security advisory on the maintained ALENOC fork: https://github.com/ALENOC/electrum-ravencoin/security/advisories/new.

This channel is for security reports, not support. Do not include wallet seeds, private keys, RPC credentials or private host details in an issue. The original Electrum security history and notices remain in the repository; this fork does not claim to replace upstream disclosure procedures.