Comment by lordentropy

I don't see where your law contradicts with what the article is saying. After Alibaba cloud researcher found the vulnerability, they first reported it to Apache foundation right away. Waited until the issue was resolved by Apache before disclosing it to the government and the wider developer community. So, Chinese government wants the information "within 2 days" before the issue is fixed.