How to report a security issue privately?

Hi, I found a security issue in ttf-parser. I don't see a SECURITY.md or private vulnerability reporting enabled on the repo. Is there a secure way to share the details with you, e.g. a security email or turning on GitHub private vulnerability reporting? Thanks.

Check the repository for a SECURITY.md file and review the current GitHub vulnerability-reporting settings. The issue provides no implementation entry point; done means the project has a clearly documented, private channel for submitting security details.

Written by the indexing model from the issue text.