Kinda feel that unless this is a Vercel-only thing, dropping this note seems irresponsible to me: If it affects Firecracker, you need to coordinate with AWS. Amazon should not appreciate prior disclosure. If it's generic, you absolutely need to coordinate with Everybody(tm). That could take weeks. (And $50K seems reasonable for a Vercel-only thing, but a generic KVM escape ought to be worth a lot more.)