To report a vulnerability privately, please email Trystan Lea the main project contact on trystanlea@openenergymonitor.org

Alternatively please create a github issue describing the vulnerability.

Thanks a lot