You can do it with the Security panel.

Please enable:

• "Security advisories"
• "Private vulnerability reporting"

I found a serious vulnerability in crypto-js. Please enable vulnerability disclosures so I can responsibly disclose the vulnerability. Thanks.

Twitter thread with some context: https://twitter.com/zemnmez/status/1714513369745830026