The public key form update vulnerability was based on the same concept in a different place.