This pull request clearly shows what's currently wrong in the #infosec community.
Another misaligned CVE with a CVSS score of 9.8 for code in a contrib/ dir that is not even build by default shows up in commercial vulnerability scanners and suddenly random people press the maintainer to release an updated version.