Vulnerability

No, actually, common practice is to not provide any details until people have had a chance to upgrade. Common practice is also to list the embargo date on announcements so that people know in advance when details will be released. Common practice is not to pretend that a one-line changelog entry is a vuln disclosure.

PS people have had over a week to upgrade. It’s spelled “wait”, by the way.