Upstream acknowledges Jim Alves-Foss as the original reporter.

1 vulnerability record and advisories credit this contributor.