https://news.ycombinator.com/item?id=14682210
https://news.ycombinator.com/item?id=14681377
This is the Github issue for this bulb where Poettering said he didn't thing this was a CVE