Here's the official response:
http://news.ycombinator.com/item?id=1443143
The exploit only involved a limited set of users and was fixed within hours of discovery.
The exploit only involved a limited set of users and was fixed within hours of discovery.