Here's our very complete security policy. We will of course complete it later but for now it is just a waste of time to do so. Because we decided to use C++, I already foresee all the memory-oriented vulnerabilities...
It's not like we got a released version yet.
If you encounter any issues / vulnerability on this project, use this link to report it.