Contacting a company about a critcal security issue is always risky. The company’s first priority in that case is usually to prevent the exploit going public while they are working on fixing it. You never know how a company will try to manage that, some companies will work with you together to fix the problem, others…