Folder Explorer runs with your user's rights and works with your desktop files, so security reports matter a lot.
Please report it privately through GitHub's private vulnerability reporting, not in a public issue. Include what an attacker could do, the steps to reproduce, and the version from Settings ▸ About.
You'll get an answer within a week. Fixes go into the next release, and the advisory is published once the fix is out.
Only the latest release gets security fixes.