Full details for this CVE can be found on github.com/advisories/GHSA-j2xj-h7w5-r7vp.