When notified of a suspected vulnerability, we conduct a thorough investigation and, if confirmed, work with the person who submitted the issue to remedy it while also coordinating public release of the information.