u/Economy_Yam678

I submitted a vulnerability to VulDB and it was rejected because my disclosure link pointed to my own GitHub repo instead of the upstream project. The rejection email says:

>Our team did review your submission and unfortunately had to reject it with the following reason:
"Please create a public issue report in their repository and send us the link."

That wording sounds like I should just reply to the email with the corrected link. But the VulDB submission guide reads more like every disclosure needs to go through a fresh /submit form.

Has anyone here dealt with this before?

1. Do you reply to the rejection email with the new link, or open a brand-new submission?
2. If it's a new submission, do you reference the old submission ID anywhere, or just file it clean as if from scratch?

Want to make sure I don't get flagged for a weak/duplicate submission. Thanks.