[whizzter]

Even if 2.x is the main culprit right now some one twitter started testing and it seems that 1.x might be exploitable as well.

[cpu_]

can you share a link to the tweet/source?

[whizzter]

Nah it's long gone, however I've later read that the 1.2 series was declared deprecated long ago and after that there was an exploit for 1.2 released in 2019, not entirely sure if it was ever patched so that might've been the source.