Submit a Vulnerability | GreenHat Security

Secure report form

Private vulnerability details

Nothing submitted here is published automatically. For encrypted-transfer arrangements or accessibility help, email cve@greenhatsec.comwithout including embargoed technical details.

Reporter

Required fields are marked with an asterisk.

Name or researcher handle *Email *Full legal nameOrganizationResearcher profile URL

PGP or public encryption keyOptional. Provide only a public key; never paste a private key or passphrase.

Vulnerability

Provide enough technical information for a private validation review.

Supplier, vendor, or project *Product *

Vulnerability title *Description *Affected version(s) *Reproduction steps *Security impact *

Repository URLProduct URLComponent, module, API, or functionFixed version, if knownCWE, if knownCVSS vector, if knownPatch reference URLVendor advisory URL

Additional evidence availableDescribe proof-of-concept files, screenshots, or logs you can share after acknowledgement. Do not place secrets or customer data here.

Private attachments are not accepted through this form yet. Submit the written report first. A coordinator can arrange a private transfer channel after acknowledgement. Do not use the normal contact form, public issue trackers, or social media for embargoed evidence.

Authorization

Basis for authorization *

I own or control the tested environmentLocal laboratory copy of open-source softwarePublic bug bounty programPublic vulnerability disclosure programWritten authorization from system ownerOther

I confirm that the testing described in this report was conducted under authorization applicable to the tested environment. I understand that submitting this report does not create or expand authorization to perform security testing. *

Coordination status

Has the supplier already been notified? *

YesNo

Is this vulnerability already public? *

YesNoPartially

Has a CVE ID already been assigned or reserved? *

YesNoUnknown

Green Hat Security is not currently a CVE Numbering Authority. Submission does not guarantee a CVE ID. Green Hat may coordinate with the affected supplier, its designated CNA, or another appropriate CVE Program participant.

Secure submission

The report is processed server-side. Vulnerability details are not included in analytics or the reporter confirmation email, and nothing is published automatically.

Secure web submission is temporarily unavailable because bot protection has not been configured. Emailcve@greenhatsec.com without embargoed technical details to arrange a protected channel.