It's not been patched yet.

Edit: Seems like another exploit found 8 hours ago: https://github.com/PHPMailer/PHPMailer/issues/924

Probably wise to disable phpmailer on your servers for now.