To report a vulnerability please contact the development team confidentially on Discord. We will discuss via a group chat if necessary and action the fix. Once the fix has been put into a release version, the vulnerability will be made public.