Hi,
Is there a reason for still holding this CVE fix open? Simply commit and forget about it.