Please contact privately via Twitter one of the current maintainers. Current list of maintainers is available here: https://github.com/khulnasoft/ThreatMatrix#about-the-author-and-maintainers

Then we would:

• verify the vulnerability
• once verified, open a Security Advisory in Github
• update you with progress