Maybe this is actually a good thing. Check a few of the cves they found and if it's things like this, you're dealing with a clown. I'd feel ashamed requesting to get a cve assigned for something like that.