Comment by the_mitsuhiko

And to be clear, the disagreement appears to be that he did not want the CVE to be assigned.