Tink is now a part of Visa.
Potential security issues and vulnerabilities may be reported through Visa's Vulnerability Disclosure Program found here: https://usa.visa.com/about-visa/vulnerability-disclosure.html