How to report security related issues?

[fdroidiordf]

Is there an (official?) way to report security related issues to the team of STK without making them visible to the public?
I have searched such a possibility but didn't found any. This forum, the GitHub issue tracker, IRC etc.: Everything seems to be public.
Or do I miss something?

[benau]

Try supertuxkart.official at gmail.com

[fdroidiordf]

Is there a PGP key associated with this mail address?

[benau]

Or you can pm benau using matrix element

[benau]

Just join our irc / telegram channel first, we can come up with a secure way to communicate later