I'm a programmer who just discovered a critical vulnerability in a widely used software that could cause massive data breaches; do I publicly disclose it immediately, or work with the company quietly, risking further breaches in the interim?

Vivienne Leroy