[sr-dev] Vulnerability reporting