Security Vulnerabilty issue template

[deadxthrre]

Summary

Adds a comprehensive security vulnerability reporting template and documentation for critical infrastructure vulnerabilities discovered in the AIxBlock platform.

What This Adds

• Security Research Documentation: Structured template for vulnerability reporting
• Critical Infrastructure Findings: S3 subdomain takeover and debug mode exposure details
• Professional Assessment Framework: CVSS scoring, CWE mappings, and impact analysis
• Responsible Disclosure Template: Industry-standard security research reporting format
• Evidence-Based Documentation: Detailed reproduction steps and technical validation

Key Features

• Standardized Reporting: Consistent format for security vulnerability submissions
• Comprehensive Assessment: Technical details, exploitation chains, and risk analysis
• Professional Documentation: Industry-standard security research practices
• Bounty Program Compatible: Professional format for security programs and bug bounties
• GDPR-Ready Structure: Data breach and privacy impact reporting framework

Required Repository Labels

Create these labels with suggested colors:

• severity: critical → #FF0000 (Red)
• type: security → #FF4444 (Red)
• area: infrastructure → #0066CC (Blue)
• priority: immediate → #FF0000 (Red)
• cvss: 9.8 → #B60205 (Dark Red)
• status: needs-triage → #FBCA04 (Yellow)
• impact: data-exposure → #FF6B6B (Red)
• exploit: chainable → #B60205 (Dark Red)
• attack-vector: s3-takeover → #D93F0B (Orange)
• attack-vector: config-exposure → #D93F0B (Orange)
• bounty: candidate → #0E8A16 (Green)
• cwe-200 → #5319E7 (Purple)
• cwe-668 → #5319E7 (Purple)
• gdpr: data-breach → #FF0000 (Red)

Template Location

.github/ISSUE_TEMPLATE/security-vulnerability.md

Purpose

This template enables:

• Security researchers to submit vulnerability reports in a structured format
• Consistent triage of security findings across the organization
• Professional documentation of security assessments and findings
• Coordinated disclosure following responsible security research practices

Security Impact

• Critical Infrastructure Security: Enables structured reporting of high-severity vulnerabilities
• Responsible Disclosure: Professional framework for security research coordination
• Consistent Assessment: Standardized process for vulnerability evaluation

---

Note: This PR adds security documentation and reporting infrastructure. The actual remediation of the documented vulnerabilities would require separate engineering work.

Ready for review and integration into the security workflow.

Closes #252 by providing a structured reporting template for security vulnerabilities.

[deadxthrre]

Hi team, I’ve prepared a security vulnerability reporting template. This PR is ready for your review.