Report vulnerabilities through GitHub private vulnerability reporting.
Include the Alba and Android versions, what happened, and steps to reproduce with made-up test data. Do not post credentials, session data, account responses or personal photos in public issues.