Viden will report the vulnerability to you in the first instance and use responsible disclosure to notify the vendor as to the test sequence that led to the vulnerability.