No update necessary -- I just updated the security policy to deny the vulnerable file type / invocations. No SVGs allowed here, mister!