Nice catch, thank you so much!
Let us know about it here, and we will take a look at it.
While we do not have a bug finder bounty program in place due to resource limitations, we do offer compensation between $100 to $1,000 depending on the significance and severity of the issue found.