Comment by alt227

"you must not disclose it to anyone other than Apple until after Apple has released a software update and published a security advisory for the reported security vulnerability."

https://security.apple.com/terms-and-conditions/