@ryanc I submitted to a vendor once and they never replied and the vuln is still there, 5 years later