> Sadly General Analysis did not follow our responsible disclosure processes [3] or respond to our messages to help work together on this.

your only listed disclosure option is to go through hackerone, which requires accepting their onerous terms

I wouldn't either