Given the first vulnerability, which stemmed from poor defaults in Rails and Github using said defaults, I wouldn't be surprised if it were affected by this.
if it's obvious for you — you are good at security. But it is NOT a common sense to use reset session