Where should I report my security disclosure?

echo zhang <[email protected]> Sat, 26 Aug 2023 16:17:21 +0800
Newsgroups gmane.mail.virus.amavis.user
Message-ID <CAP+fm77imXRCCY-BmGRsv2Vi1wGa=b9c2dVmc0GHe3Y0iBgacw@mail.gmail.com>
Greetings,
I'm currently working on a security research related to email gateways. In
our test, we found a possible security vulnerability in Amavisd. I would
like to know where I should raise my security disclosure (perhaps a certain
email address)?
Thanks.

Jiahe Zhang