More like 2 years! And at least 3 separate bug reports, roughly one year apart each!
https://gitlab.com/gnachman/iterm2/issues/3688
https://gitlab.com/gnachman/iterm2/issues/5303
Unless you are into alternative facts, of course, then, yeah, very prompt release engineering and vulnerability fixing!