Apparently it's known since 2018 and since never been patched.
Fishy IMO...sadly