Vulnerabilities can be reported by contacting one of our staffmembers over on our support server. High & Critical (CVSS) vulnerabilities will be fixed within 48 hours, other vulnerabilities have to be fixed within 7 days after it has been pointed out to one of the developers.