In order to report a vulnerability please reach out to nik@serenity.re.

Unfortunately we don't offer any bug bounty since we are a bootstrapped business.