Where should I report my security disclosure?

echo zhang <[email protected]> Mon, 28 Aug 2023 17:11:03 +0800
Newsgroups gmane.mail.virus.amavis.user
Message-ID <CAP+fm758p=FXqhHvedBgZ6kV+6NXB4FPPkoEYN2Vi=81NnegqQ@mail.gmail.com>
Greetings,
I'm currently working on a security research related to email gateways. In
our test, we found a possible security vulnerability in Amavisd. I would
like to know where I should raise my security disclosure (perhaps a certain
email address)?
Thanks.

Jiahe Zhang