So, the advisories aren't public and my name hasn't been added to the official CVE credits yet - but hey, it's in the works! In the meantime, here are some screenshots to prove I'm not making this up 😄