Report it privately through GitHub's private vulnerability reporting, not in a public issue.
Fixes are made on the latest release.
Web Algebra authenticates to LinkedDataHub with a client certificate, given in
CERT_PEM_PATH and CERT_PASSWORD. Keep the password out of files under version
control and out of command lines; read it from a file into the variable.