Was there any discussion surrounding this as to whether or not this is a security issue?
A discussion can include debates, disputes, or polite talk about how to resolve uncertainty.
Just because you see multiple comments doesn't mean it's a discussion. For example:
Curators were instructed to check the bugs reports, pull requests, and mailing lists archives.