What kind of reporting format is expected when submitting a vulnerability?
The policy may specify a detailed format for reporting vulnerabilities, including sections for description, impact analysis, and any evidence collected.