If an item contains a vulnerability and cannot be easily fixed, you will be entitled to a refund from the author. If the item can be corrected, the author should update it immediately. If the item contains an uncorrected vulnerability in an appropriate time frame, we expect the author to refund the item.