Comment by amvalex

Author here, I wrote the fix with Jakub Zelenka. Happy to take any question you may have about this CVE.