So...how does this work with the anarchic Misuse of Computers Act? I will never submit any disclosure in SG for any vulnerability after the time 2 people got charged for "hacking" the PMO website through HTML injection via the Google Search Bar widget on their website.
----------------------
CSA as a CVE Numbering Authority (CNA)
https://www.csa.gov.sg/Tips-Resource/Resources/singcert/cve-numbering-authority