To report a vulnerability, contact us on Matrix with full details about the vulnerability. if the vulnerability is accepted I'll get back to you and we'll work together on it.