This is published on a marketing website.
If it were not a marketing scheme, they would responsibly disclose the vulnerabilities to the code owners, and go on with their lives.
They published it to their blog where they publish everything else.
They published it to their blog where they publish everything else.