The claims were anecdotally confirmed Wednesday at 15:00 GMT when a PoC exploit surfaced on an original GitHub repository, shared with a Sonatype researcher by a source.

The PoC leverages a previously unknown method to achieve remote code execution (RCE). Present in the GitHub repo were also PDF with detailed exploit instructions: