Security Disclosure eMail

Hello Oxid community,

I tried today to send a message to security@oxid-esales.com, but sadly it seems
the mail server is not configured proper.

Received-SPF: None (OX-EX.oxid-esales.local: mail@example.com does not
designate permitted sender hosts)

(mail@example.com was replaced by the correct email).

Is the eMail address incorrect or is it simply a failure in the configuration?

I would like to disclose information for a (most likely) yet unknown exploit
for the current oxid community edition.

Best Regards,
Schalla