GraphQL Request: Bug hasNextPage True while endCursor None

When requesting the /api/graphql in POST, I try to fetch the vulnerabilities information on a Gitlab project. If you want to test it, you can use this following request:

query VulnerabilityProject(
  $fullPath: ID!, 
) {
  project (fullPath: $fullPath){
    vulnerabilities {
      nodes{
        id
        title
      },
      pageInfo {
        endCursor
        hasNextPage
      }
    }
  },  
}

I have the following result:

{'nodes': [], 'pageInfo': {'endCursor': None, 'hasNextPage': True}}

I do not think the hasNextPage should be True while the endCursor is None. It seems that the project I used have the Secure dashboard but is not activated as we do not have the premium version any more. Maybe this issue raise only when we still have vulnerabilities (so true) but is not activated because we did not paid for that ?