Hacker News Reader

The bug doesn't seem to describe the vulnerability at all, though?

When making security patches it’s often best to leave those details out, as otherwise it’s used as a guide for bad actors

The bad actors already exploit them.

The really good bad actors already exploit them. The eager bad actors with less skills look for guides.

How do you know every bad actor already knows how to exploit it?