Comment by OscarCunningham

Looks like there might be a second vulnerability: https://fedi.katze.sh/@elise/117479383739450605