We welcome reports of security vulnerabilities. Please send them to contact@ongoingwarehouse.com. We do not offer any bounty/reward.