We acknowledge that every line of code that we write may potentially contain security issues. We are trying to deal with it responsibly and provide patches as quickly as possible.
We host our bug bounty program on HackerOne. You can also email our security team directly at security@tomtom.com