If you find any vulnerability, feel free to create an issue. You can expect an answer within one day. A resolution should be there within a week, depending on the impact and size of the issue.