Probably because there's no (public) disclosure and no CVE. From what I've googled, there's literally nothing about this aside from the tweet.