Making Responsible Security Disclosures

Where can I submit information related to security bugs in a secure manner? Is there a PGP key I can encrypt against to send an encrypted email to support? I’m aware of a security vulnerability in the public version of Plex server and need a secure way to responsibly disclose it, but I could not find any information about how Plex would prefer I do that.

Write to security@plex.tv first for details about that.