The best way to report a security issue or vulnerability is via my Keybase account: https://keybase.io/jackwarren

You can access my PGP public key there to securely contact me via email. My email address is [email protected].

If my website is functional, you can also access the general contact page at jackwarren.info/contact.