Where should I report my security disclosure?

[echo zhang]

Greetings,
I'm currently working on a security research related to email gateways. In
our test, we found a possible security vulnerability in Amavisd. I would
like to know where I should raise my security disclosure (perhaps a certain
email address)?
Thanks.

Jiahe Zhang
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.amavis.org/pipermail/amavis-users/attachments/20230828/f6758400/attachment.htm>