Glossary: Vulnerability Management and Monitoring

responsible disclosure

Also written: coordinated vulnerability disclosure, CVD

Reporting a flaw privately to the organization that can fix it, giving it time, often 90 days, and only then publishing the details, so users get a fix before attackers get the details.