Security Issues - email or Github issues?

Hi, I'd like to disclose a couple of security issues I found in the library. Is the maintainer okay with discussing them through issues here or over email? If email, please send me an address I can contact. 