AI vendors' response to security flaws: It wasn't me
… And GitHub, after first calling this a "known issue" that they "were unable to reproduce," ultimately paid a $500 prize to the researchers for their disclosure. None of the vendors assigned CVEs or published public security advisories. …