Apparently he did. However, GH only fixed that specific exploit he provided. The general vulnerability was apparently spread throughout their entire code-base.

Apparently he did. However, GH only fixed that specific exploit he provided. The general vulnerability was apparently spread throughout their entire code-base. After realizing this, he filed a report with the framework GH uses (which would fix the problem for everyone - not just GH). They told him to fuck off (politely). So he proved his point. Childish? Yes. But then again, he is a child. The kid is a teenager. That's how they're supposed to behave. Also, I have a strange feeling things will actually be fixed now? So the kid gets results.