GrayGyre is not a security or cryptographic primitive. Do not use it for encryption, secrecy, authentication or integrity.
Memory-safety, undefined-behavior and bounds defects can still be security-relevant implementation bugs. Until a private reporting channel is configured, open a minimal GitHub issue that does not disclose sensitive deployment information and ask maintainers how to continue privately.