> I want to know so I can get in a fix or shut down that particular feature until its fixed by a vendor. That assumes you can shut down that particular feature

> I want to know so I can get in a fix or shut down that particular feature until its fixed by a vendor. That assumes you can shut down that particular feature without crippling your business operations. If my system had a hole, I'd prefer that it were disclosed to the vendor before it's disclosed to hackers, adversaries and foreign governments.