From bugs to bypasses: adapting vulnerability disclosure for AI safeguards