Comment 5 for bug 2048493

Unfortunately it's looking like the Horizon developers haven't found time to address this. I do wish project teams could better predict whether they're likely to prioritize work on a reported vulnerability and say sooner if they can't, so that we could switch them to public straight away and see if that urges anyone else in the community to work on a fix instead.

I'll try to poke them again and see if I can get a response. If any Horizon developer does see this, please comment to let us know whether we should keep it private for two more weeks or switch it to public now. Thanks!