Where should I report my security disclosure?

[Matus UHLAR - fantomas]

Hello,

On 28.08.23 17:11, echo zhang wrote:
>I'm currently working on a security research related to email gateways. In
>our test, we found a possible security vulnerability in Amavisd. I would
>like to know where I should raise my security disclosure (perhaps a certain
>email address)?

it looks that amavis development is done on gitlab: 
https://gitlab.com/amavis/amavis

I believe reporting unspecified bug could help, especially if you can 
provide patch.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
2B|!2B, that's a question!