Whoever does this, should really be banned from touching any electronic device. How the fuck you think is a good idea to submit a vulnerability full of AI hallucinations where even the software name that you filled in the security advisory field is wrong and not even related to the WAF (it was NPM)