Security vulnerability found, but no defined security policy for this project

[dbhynds]

I have identified a security vulnerability on this project, but the project does not have a defined security policy. Could someone provide information about how to safely disclose the vulnerability?

[MartinLenord]

You can pass it to me directly if you want