I think that everything is done. But as it is a security bug, reassigning to Security Team to check and close.