Thanks to Johannes Möller for finding and reporting this problem.

1 vulnerability record and advisories credit this contributor.