@molenaar The talk will be ok without the specific vulnerability. But this helps to add another positive note. Roughly a month and a half between action taken to prevent exploitation and permission to publish is still far from ideal if I would have neede to warn others too.