a9a2ce2f6a
In PR #11828, the module author requested, and got, a new CVE for this issue. The module should reflect that.