[EJTH]

I would go to the company, and if they didn't respond to the issue, I would do a public disclosure of the flaw.