Contact the development team at hello@compassmeet.com to report a vulnerability. You should receive updates within a week.