Contact the development team at compass.meet.info@gmail.com to report a vulnerability. You should receive updates within a week.