But it is another React CVE. Doesn't really matter why it was uncovered, it's bad that it existed either way