Private vulnerability reports now use a structured form with required summary, details, proof-of-concept, and impact fields, plus optional customization and an AI-assistance disclosure.
Why it's interesting
Breaking an ambiguous free-text task into explicit fields improves submission quality and gives reporters clearer expectations before they submit sensitive information.