they didn't say it was a dup, they shared it bc the CVE name is similarly farcical