Sounds like they need to file a CVE.. oh wait.