They updated to a version that included a patch for that exploit, however it doesn't matter in the grand scheme of things, because they're still on 22.x, support for which has already been terminated