Hello and welcome to the forums.
There are links at the bottom of the Contact Us page on the VMware website that you can use to report security issues.
If you are sure that it is a critical security issue, contact VMware directly and / or submit a support request to have someone look at it.
Please do not post it officially.
If you found this or other information useful, please consider awarding points for "Correct" or "Helpful".