Insomnium is a fork of Insomnia, and is designed to be 100% local with 100% data privacy. By design, there should not be any security vulnerabilities in Insomnium.
If you find any security vulnerability in Insomnium, you can report it to us at security@archgpt.dev.