To report a vulnerability, please contact security@getfire.bot with details explaining the issue.
You should get a response in less than 24 hours and a fix should be pushed in less than 48 hours.
Once a fix has been pushed, you will be contacted to let you know and depending on severity, you may be rewarded :)