Found a vulnerability?

GitHub has not claimed a profile here. If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf — with your explicit permission — and tell you what came back.

Private. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.