That's a significantly short amount of time to be able to address an issue before knowledge of the vulnerability becomes public knowledge. I'm all for releasin

That's a significantly short amount of time to be able to address an issue before knowledge of the vulnerability becomes public knowledge. I'm all for releasing a vulnerability after it a) is mitigated or b) becomes clear the responsible party has no plans to address the vulnerability in a timely fashion. One day is in no way responsible unless the researchers were told pointedly that there was no plan to address the issues. IMHO.