What is the ethical procedure for reporting a newly discovered security vulnerability to ensure it is fixed without causing extra harm?

Question

Accepted Answer

Report the bug to the vendor privately so they can fix it safely.

Answer

Keep the vulnerability secret and sell it to the highest bidder.

Answer

Ignore the bug unless it directly affects your own personal data.

Answer

Post the full details on social media immediately to warn all users.

Crowdly