Comment by CiPHPerCoder

I'm not on their payroll, and I'd already fixed the CVE upstream over a year ago, so no.