Use maintainer's email specified at https://li0ard.rest.

You will get an update as soon as the email is read; a "Security vulnerability" phrase in email's title would help.