Are they saying that people can read your code (not actually a problem for open source projects) or that they can update it and thus alter your site?
The former doesn't seem so bad - the latter is obviously catastrophic.
I wish I spoke Russian...
Security exploits aren't just bad for what they directly allow, they are bad for how they often combine well.
(You, AndrewDucker, may already know this; I'm not trying to imply otherwise. I'm saying this because this is a point that needs to be made more often, too many people ignore it. Any unauthorized access into your system needs to be taken very seriously, because of this risk.)