That line was aimed at other OSS maintainers.

These alerts are absolutely not being shared publicly before we have a fix for them.