Even if they say it is a full disclosure. It is everything but. If you want other software developers to have a quick scan around if there are maybe more parts involved you need to do a full disclosure. So, learn first more about open source and security vulnerabilities handling and subsequently you might entitled to use that headline again.

Update: Seems that I am not the only one finding the security handling of the Rails Core team peculiar.