Get Started

Structured forms for private vulnerability reports

UpdateSecurityDeveloper Tools

First reported · 22d ago · 1 source

Crest summary — written by AI from the 1 source below; every figure is checked against them · model deepseek-chat

Summary

GitHub added structured forms to private vulnerability reports, prompting reporters for details such as a reproducible proof of concept instead of a single free-text field.

Key facts

  • GitHub Changelog announced the change on 2026-10-01.
  • Private vulnerability reports can now use a structured form.
  • The form asks reporters for details needed to assess a vulnerability.
  • It includes a reproducible proof of concept.

Why it matters

Maintainers receiving private vulnerability reports get more consistent, assessable submissions, which can speed up triage and reduce back-and-forth with reporters.

Companies

Original sources (1)

The report this event was built from. Crest of Tech keeps no article bodies: the full text is at each source.

  1. GitHub ChangelogOfficial · Primary
    Structured forms for private vulnerability reports · By Allison
    Read at GitHub Changelog
Structured forms for private vulnerability reports — Crest of Tech