Security issues and bugs should be reported privately to security@phoesion.com . If for some reason you do receive a response within 24 hours, please follow up via email to ensure we received your original message.
Please do not open issues for anything you think might have a security implication.