When a vulnerability is fixed, a new patch version will be released (e.g. 0.6.34 -> 0.6.35).
Please email the developer (Matthew Bloch) at masiyou@gmail.com to report a vulnerability.
If preferred, you can create a new draft security advisory (https://github.com/mbloch/mapshaper/security/advisories)