If matrix-nio is responsible for the vulnurability, please report it to them via their preferred channels. Otherwise, send a private message to @krazykirby99999:matrix.org via Matrix.