Please report (suspected) security vulnerabilities to flowtyped@gmail.com. If you do not receive a response within 48 hours, contact a flow-typed team member on the Flow Discord server. If the issue is confirmed, we will release a patch as soon as possible, depending on its complexity.