GitHub
October 1, 2026

GitHub structures private vulnerability reports

What changes

Private vulnerability reports now use a structured form with required summary, details, proof-of-concept, and impact fields, plus optional customization and an AI-assistance disclosure.

Why it's interesting

Breaking an ambiguous free-text task into explicit fields improves submission quality and gives reporters clearer expectations before they submit sensitive information.