We found an out of bounds access in the Squirrel fork of OpenTTD that allows to break out of the sandbox. The issue is also present in this version of Squirrel and we tried to get in touch on the 14th via the mail mentioned in #241 (comment). However, we haven't received a response yet and want to ask how to report this issue so that it can be fixed here too.