Please report any security issues you discover to security[at]citizenlab[dot]co
We will assess the risk and get back to you within a working week. If the issue is confirmed, we will release a patch as soon as possible, to the best of our abilities.
Thank you for your contribution.