Upstream acknowledges Evgeny Vereshchagin as the original reporter.

1 vulnerability record and advisories credit this contributor.