Comment by janoelze

And additionally a failure to handle a responsible disclosure.