I think that TowelRoot probably was responsibly disclosed
Add info on pty race vulnerability