Vulnerability reporting

I believe I have found a vulnerability (I consider it on the tamer side). Nonetheless, where would this project like vulnerabilities reported? Why not use Github's private vulnerability reporting ( https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository )?