Hi Stefan,
Thank you for your feedback.
We don't have
the policy of notifying the customers about the vulnerability so far
however we take this as the learning and we will communicate the
vulnerability related info to our customers in future.
Appreciate your understanding.