Normally I only see vulnerability disclosure posts when it has gone horribly wrong, it’s nice to see a story of responsible disclosure just working out!