3 ms·

And why shouldn't it be?

• Ajedi32 9y ago
  Maybe because it's not sending user input into the "vulnerable" API? Or because it's not even calling the "vulnerable" API in the first place? Or because it's a system utility which will never be exposed to untrusted user input?