Most domains are only like ~$10/year. I already have a handful registered for potential project ideas because they're borderline free, for major vulnerabilities I would do the same.