I don't follow lemmy development too closely, but I suppose they have a open bug tracker somewhere and these sound pretty serious, so, just to gain more information on these myself, I suppose you could provide links to bug tracker tickets?
That bug tracker is in MS Github - a place I will not go. And I have yet to find an organised or simple way to find downstream trackers. I generally check Debian but when a pkg is not in official Debian then I report to [email protected] and [email protected].