Out of interest what do you do with exploits for projects you don’t want to contribute to? I assume you’re not reporting them or fixing them because that’s cont

Out of interest what do you do with exploits for projects you don’t want to contribute to? I assume you’re not reporting them or fixing them because that’s contributing. Do you sell them or something?