Bear in mind that if you don't report anonymously the question will come up as to what made you even consider this as a vulnerability & YOU will be investigated. Non-anonymous whistleblowers are often demonized and persecuted for their actions even of it is the right thing to do.