You can disclose any vulnerability directly to [email protected] or through our discord to any team member.

If the vulnerability is verified, you can expect a published fix in 2 weeks. After that, it should be disclosed publicly.