Where should I report security related issues?

[Charo _]

Dear maintainers,

Recently I found some vulnerabilities in one of the GCC libraries.

Is there any private list or something like that to report it
or should I use the GCC bug tracker?


Thanks in advance,

Charo