not the same one

they didn't say it was a dup, they shared it bc the CVE name is similarly farcical