Security issues is out of scope, to register vulnerability issues check: https://www.omnisend.com/bug-bounty/