Coordinated Vulnerability Disclosure

The practice of privately reporting a discovered security flaw to maintainers and agreeing an embargo and fix timeline before any public release, so patches ship before exploits.

grounded in: trend theme 'Systemic security exposure: A decade-plus latent Linux memory bug shows the enduring pull of deep vulnerability disclosure'