vulns.co
/
GKData.io MCP

Google Bug Hunters · 1 min read

What is a security vulnerability?

A security report needs to explain why the behavior harms the particular application. Google's guide says that a familiar vulnerability label, or behavior that is unsafe elsewhere, does not establish impact here. It also separates conditions that must already exist from consequences caused by the reported issue.

Open the reference Reporting GuideReviewed 2026-10-07

How to use this reference

Review evidence from authorized work against intended application behavior. State the relevant context, prerequisites and supported consequences separately, and qualify impact rather than inheriting claims from a generic vulnerability description.

Before reading

  • Understanding of the application's intended behavior and authorized review scope

Context and limits

  • This general reporting guide establishes no individual incident, remediation result or award.
  • The embedded video's date does not establish the article's publication or update date.
  • The catalog retains reporting principles only; technical examples and operational scenarios are omitted.

Sources and provenance

  1. What is a security vulnerability? Google Bug Hunters · reviewed 2026-10-07

Record reviewed 2026-10-07. Snapshot cb017eaea66e. Open the complete JSON contract.

GitHub snapshot 2026-10-12

cb017eaea66e · JSON exports & schemas · CC BY 4.0 content / MIT software