> For a reported security vulnerability affecting any Apple platform to be eligible for an Apple Security Bounty award, you must not disclose it to anyone other than Apple until after Apple has released a software update and published a security advisory for the reported security vulnerability.
Which does not have the meaning of prohibiting disclosure to third parties or the public; it only means that you forfeit the bounty.
> For a reported security vulnerability affecting any Apple platform to be eligible for an Apple Security Bounty award, you must not disclose it to anyone other than Apple until after Apple has released a software update and published a security advisory for the reported security vulnerability.
Which does not have the meaning of prohibiting disclosure to third parties or the public; it only means that you forfeit the bounty.