You can file a report through HackerOne: https://hackerone.com/anthropic-vdp?type=team file it as a bug (which it is)