fixed markdown for responsible disclosure