Comment by cr3ative

What would you characterise the two linked security reports as, if not holes?