Patch & Proof
Submit a source
Bring evidence that helps a defender.
Make the reference traceable
Send a public advisory, vendor disclosure, standards document, or a carefully scoped defensive lesson. Attribution should have a source and uncertainty should stay visible.
Include the original URL, relevant dates, the claim it supports, and any connection you have to the work. Submitting does not guarantee publication. Do not send confidential material.