CrowdCent's security policy, covering this client library, the CrowdCent API, and crowdcent.com, is published at https://crowdcent.com/security/. It sets out what is in scope, the rules for testing, and rewards.
To report a vulnerability, email info@crowdcent.com with the subject "Security". Please do not open a public issue for a security report.