This is a perfect example of how security venerabilities should be disclosed.

• Quickly • Transparently • With a fix already in place