Acknowledged by Puppet Labs

I got acknowledged for reporting a vulnerability and a information disclosure on the Puppet Labs main website.

https://puppetlabs.com/security/acknowledgments