Right. As if this guy who reported it was the only one at the time who could have pwned Github with it.

For all we know, this bug has been abused for a long time to commit backdoors to other projects (perhaps those too big and active to notice).