Submit your vulnerability report on any Marketplace App to [email protected]. More ways to report a security vulnerability in Atlassian products can be found here. Additionally, you can explore all public bug bounty programs from Atlassian and Atlassian Marketplace here.