If you've spotted security vulnerability, visit Issues section and report this just as a standard problem related to Reposilite. As soon as possible the author should investigate this case and resolve the problem with the highest possible priority. Because it's free and open source project, there is no guarantee how fast the fix may happen :<

You can also try to reach the author through private communication channels described at dzikoysk.net.