Vulnerability reporting

National Cyber Security Centre SK-CERT has published The Vulnerability Reporting Guideline.

This guideline is a tool for security researchers, software developers, hardware manufacturers as well as for the general public. It provides a detailed procedure and recommended steps for reporting newly discovered vulnerabilities and also a procedure for reporting already existing vulnerabilities found on systems and services being operated.

This document was created with the support of the National Cyber Security Centre of the Netherlands which issued several documents regarding the coordinated vulnerability reporting:

https://english.ncsc.nl/publications/publications/2019/juni/01/coordinated-vulnerability-disclosure-the-guideline