Please report vulnerabilities privately through GitHub: Security → Report a vulnerability on igorkasyanchuk/diffnotes. Don't open a public issue.
You'll get an answer within a few days. Fixes go into the latest release only, so keep your server and extension up to date.
How DiffNotes protects your data: docs/security.md.