Comment by scrum-treats

"We responsibly disclosed the vulnerabilities to the vendor in June 2022, and they were fixed shortly after."