Is there any way to report an exploit/vulnerability ?

The Bug reporter seems to post them publicly is there any way to submit information in a way that will not expose it to the public ?

You can send a twitter message to garry or PM a mod.

I pm’d a few of the mods with the info.