Comment by dns_snek

Yeah, they didn't claim that it's a CVE, just behavior that they wanted to change. Miscommunication then.