We have a new category for errors, incorrect/unexpected outcomes, or unintended system behaviors not related to one or more security vulnerabilities.
https://republic.confection.io/t/bugs
Rewards use the same guidelines here: https://republic.confection.io/p/1-guidelines