"We responsibly disclosed the vulnerabilities to the vendor in June 2022, and they were fixed shortly after."