Maybe I don't understand the vulnerabilities, but maybe CDProjekt should just release the code themselves as a power move?<br>Again, I don't exactly know just how bad it is to have the source code out there. But if it's mainly just damaging to CDProjekt and not to the users, then their best bet could be to turn this thing around in their favour