Was this vulnerability disclosed responsibly by the author?