...
The first thing for you to do is to email security@freepbxsecurity@sangoma.orgcom, and please include as many details as possible. This includes such things as code snippets and a proof of concept (if you have one). We will evaluate the report and send a non-automated response within 3 (US) business days.
...