Yes, I agree, but Rapid7 does not normally do that. https://www.rapid7.com/security/disclosure/ https://www.rapid7.com/security/disclosure/ “ If the responsib

Yes, I agree, but Rapid7 does not normally do that. https://www.rapid7.com/security/disclosure/ https://www.rapid7.com/security/disclosure/ “ If the responsible organization is showing consistent good-faith effort to develop and ship an update, but cannot complete this work within 60 days, a 30-day extension may be granted at Rapid7’s sole discretion under the Default Policy (or for any of the enumerated exceptions below).” They do this with good faith as far as I have seen. The issue as I see it is that JetBrains decided to stop communicating, eliminating the “good faith” on their end.