@Li@tech.lgbt kind of, but you're not
supposed to.
i remember reading at least two instances of people reporting issues in source-available software, the companies not doing anything, the researcher getting pissed off after a year of unproductive back and forth, disclosing the issue, and the company suing them for it.