This MR doesn't reference a confidential issue, but has labels worth alerting for (bugvulnerability).