This is exactly the problem. By doing this with a security issue you are essentially going to have to be happy to see the problem fixed, regardless of whether or not it has your name on it because the maintainer has more to do than to tutor you until you 'get it right'. There are other more suitable venues for this.