Talk to the people who write the code.

Found a security issue?

Write to projeto@datarunner.app with what you saw and how to reproduce it. We acknowledge receipt and keep you posted until the fix ships. All we ask is that you do not test against other people’s data, and that you wait for the fix before publishing.