Disclosure of Security Vulnerabilities: Legal and