To report a vulnerability, just submit an issue with the app version, running OS and description of the vulnerability found.

If it's accepted, in one week or more it will be fixed. Or else it's declined, feel free to argue againt in issues tab.