I have been looking into this disclosure standard: https://github.com/RD-Crypto-Spec/Responsible-Disclosure
It has been adopted by ZCash already and we expect more projects to follow: https://github.com/zcash/zcash/blob/117f74df596d6c4c3d5204971431710e42535359/responsible_disclosure.md
This diff is a work-in-progress and welcome to suggestions.
If you have recommendations that you believe to be sensitive or would rather talk in private, please don't hesitate contact me directly on Slack, Telegram, or by email (`jasonbcox@bitcoinabc.org`).