https://opensats.org/apply/red
"Report material vulnerabilities privately to the appropriate maintainer, vendor, or operator, and allow a reasonable opportunity to investigate and remediate before public disclosure. Do not exploit a vulnerability for unauthorized access or gain, condition disclosur...