We are currently providing software updates for all official Espruino devices.
To report a vulnerability please just create a GitHub issue.
If you feel the vulnerability is extremely serious and could be exploited if details were published, please contact us by email at [email protected].