At Go Vocal (formerly CitizenLab) we take security seriously. Please report any security issues you discover to security[at]govocal[dot]com
We will assess the risk and get back to you within a working week. If the issue is confirmed, we will release a patch as soon as possible, to the best of our abilities.
Thank you for your contribution.