Create an issue and request any collaborator, or better if you know the fix then create a new branch with name as vulnerability-fix, commit the fix, then send a pull request. Tagging a reviewer is recommended.