Even though it's not a security bug, I'd give the guy a small reward for contributing given that the community/support for this project is trying to grow.