Not sure there was a public disclosure according to pasv (guy who found it), I think adding the reference would be nice though!