Please contact pythos.team@gmail.com to report security vulnerabilities.
We use pythos.team@gmail.com for our intake and triage. For valid issues we will do coordination and disclosure here on GitHub (including using a GitHub Security Advisory when necessary).
The PythOS Team will process your report within a day, and respond within a week (although it will depend on the severity of your report).
Alternatively, join our Discord server and DM @milochan1313 or @alexlam_0206 .