Vulnerabilities discovered in Aspycot can be reported on github.com/ThalesGroup/aspycot issue tracker.
Aspycot is verification platform that uses C software applications, some of which are applications that attack themselves with code-reuse attacks. These are not vulnerabilities.