How can such a simple code change fixes such a big vulnerability?
the commit log is tad unclear and the GHSA writer didn't bother themselves with linking the offending code
Hmm, though this seems to affect the case-hack thingy only, which seems like a macos-specific feature...