How to report possibly exploitable Garry's Mod bug

Hello,

I’ve found a bug in Garry’s Mod that could cause quite a bit of havoc on servers if found out about, how would I go around reporting it privately? Do I simply message Robotboy or Willox on the forum or github?

PM it to Robotboy, that should do it.

Alright, thanks.