The author of this post is incorrect about the timeline. Our Atlas clusters were upgraded days before the CVE was announced.