Report a vulnerability

For vulnerabilities that are not public yet. Publicly known CVEs in packages are found by the scanners and do not need a report.