For critical vulnerabilities, send a message to [email protected]

For anything else, just create an issue. You should expect an answer quickly on both cases.