Not necessarily anything to do with YC; the vulnerability was discovered and posted on twitter shortly after last week's vulnerability.