2 ms·

They probably patched their public-facing web servers, but not their internal link-fetching app servers.