Comment by parhamn

> Valuations for server-side vulnerabilities are low, because vendors don't compete for them.

Why don't they?