Comment 1 for bug 1944633

I'm not sure if adding the Mahara Security team as subscribers after the creation of the ticket was enough to get you folks notified so here's another message to generate a notification :)