3 ms·

Yahoo doesn't have a right, but a researcher is acting immoral if he/she sells the vulnerability to someone else that may exploit it.