3 ms·

Additionally in this case the company has a bug bounty policy / program, so it isn't quite unsolicited.