[Canada]

Once a vulnerability is being actively exploited it makes sense to disclose it to the public even if a fix is unavailable. Doing so gives users the chance to protect themselves by changing their behavior until updates become available.