private vulnerability reporting

Private vulnerability reporting is the practice of sending security findings directly to a maintainer or vendor instead of disclosing them publicly first, and this tag follows how that channel is evolving on WindowsForum.com. The tagged coverage centers on GitHub's private vulnerability reporting (PVR) feature, including its October 2026 changelog adding daily rate limits and trusted reporter allow lists to curb low-quality and automated submissions that bury legitimate findings. The discussion touches on open-source maintainers, security researchers, verified accounts, and access controls in GitHub's security dashboard, making this tag useful for readers tracking coordinated disclosure workflows and platform-level changes to how bug reports reach the people who fix them.