You can report security vulnerabilities privately via email to bvdrucker@gmail.com.