To report a vulnerability, please send a mail to: k@jpi.io before disclosing it publicly and I'll try to get back to you as soon as possible.