The vulnerability might be in the proof-of-concept