I reported this bug two weeks ago and they have not responded. This is the second time I've submitted a security bug and got nothing back...