In order to report a vulnerability, you can either join the IRC channel #ihatemoney on libera.chat and ping active users available for a private message, or write an email to bugs-ihatemoney “@” antipoul.fr This email address is an alias, so you can expect an answer from another address.