I don't even know if I agree about the slight vagueness as it is trivial to just open the git repository and read what the issue is, and what the fix was. Open Source be like that.. I'm going to take a wild guess that potential exploiters are very able to do that.