Saying that it's not new wasn't meant as a criticism for your discovery of this happening on github. Quite the opposite. It's more of an observation on how eve

Saying that it's not new wasn't meant as a criticism for your discovery of this happening on github. Quite the opposite. It's more of an observation on how even well-known security vulnerabilities can go overlooked. Even by companies with as big exposure and as many resources as github.