"Disclosure deadlines have long been an industry standard practice. They improve end-user security by getting security patches to users faster." http://googleprojectzero.blogspot.com/2015/02/feedback-and-d...

"Vulnerabilities reported to the CERT/CC will be disclosed to the public 45 days after the initial report, regardless of the existence or availability of patches or workarounds from affected vendors. " https://www.cert.org/vulnerability-analysis/vul-disclosure.c...