It would be really really useful if we had a bit of a template on the security issue report form that includes a field of "introduced" or similar.
I'm not expecting the author of the report to necessarily work it out, but if someone responding does, that makes life easier.
I assume this about changing the (currently empty) default value for the Description field in https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/defaults/75/ , as that form is also linked by default from the Favorites/Bookmark dropdown in the top bar?
Note that there are also https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/73/ and https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/78/ (and https://phabricator.wikimedia.org/transactions/editengine/maniphest.task/view/74/ but that's only for editing, not for creating)
I think it would be good if there was a template for the description similar to the bug report form. Most of my security reports usually follow this structure (unless there are multiple vulnerabilities in the same task):
Regarding the field suggested in this task, IMO it should be a separate field (similar to e.g. Risk Rating or Author Affiliation) rather than a part of the description.