Yeah that doesn't make a lot of sense that they reported it but also nobody knew it was a security issue..

Maybe an LLM just happened to do one of those "while I'm here" fixes in Feb and because nobody reviews anything anymore..

"Fixed reading too many bytes."

LGTM!

Edit: I was close! "Detect and report invalid stream earlier." Could have been a person.