ɪn ðɪs kˈeɪs, ðə sˈɜːt slˈæʃ sˌiːsˈiː wˈɜːks pɹˈaɪvətli wɪððə vˈɛndɚ tʊ ɐdɹˈɛs ðə vˌʌlnɚɹəbˈɪlᵻɾi bᵻfˌoːɹ ɐ pˈʌblɪk ɹᵻpˈoːɹt ɪz pˈʌblɪʃt, jˈuːʒuːəli dʒˈɔɪntli wɪððə vˈɛndɚz ˈoʊn sᵻkjˈʊɹɹᵻɾi ɐdvˈaɪzɚɹi.
In this case, the CERT/CC works privately with the vendor to address the vulnerability before a public report is published, usually jointly with the vendor's own security advisory.