The pleaseure to see the speed of bux-fixing by vendors is even much exciting that finding bugs! Well, that's not completely true..anyway is always good to look at a JIRA issue opened and closed the same day for a bug (XSS(s) in our case) fixed on-the-fly. For those of you that are already using Riot in production, and cannot wait for the next minor release, Felix already published the patches in the SVN trunk. Take a look at the JIRA issue here and at the change-log here. That's what did Felix Gnass, the lead developer of RiotFamily, in which we have found security issues. Thanks Felix for fastly patching your powerful platform.