Typically, security researchers wait until vulnerabilities have been patched until announcing the issue. Peloton