It's not recommended to report security-related issues as a public issue.
You should report critical exploits, which can be dangerous in a private conversation.
You can for example contact us on Discord.
For this, you can join our Discord Server and choose an administrator from the team.
If you can't use Discord, due to your age or other reasons,
then you can't contact us at the moment, but we are planning to setup an official email.