Telling divd.nl (Dutch Institute for Vulnerability Disclosure) can be a good option too.