Tailscale worked with them on an issue they found, not a vulnerability:

https://tailscale.com/blog/sqlite-wal-reset-bug