In order to report a vulnerability simply create an issues for it.

These are checked regularly and are the primary support channel.