Coordinated disclosure.
A finding should explain the boundary crossed, the conditions required and the action needed to fix it.
What an advisory records
Affected products and versions, the vulnerability class, demonstrated impact, reproduction conditions and remediation. A timeline connects the report, coordination and publication.
Evidence and attribution
Identifiers and vendor acknowledgements link back to the primary record. Confirmed impact is separated from possible wider consequences.
No public advisories are listed at present. Findings are published only when appropriate to the coordinated disclosure process.