Yes, it has: > I reported this issue privately through the project’s responsible-disclosure process. The underlying configuration has since been patched, so I’

Yes, it has: > I reported this issue privately through the project’s responsible-disclosure process. The underlying configuration has since been patched, so I’m publishing the details now to explain what the issue is and let users know to update their systems.