Public thanks to individuals who responsibly disclosed security issues.
If you have reported a vulnerability and wish attribution, mention it in your report.