This was fixed in upstream commit https://gitlab.gnome.org/GNOME/gvfs/commit/a23eb6f14eb3cffa1585d4e5e566f779337d1e04
Uncertain whether this qualifies as a security issue - there doesn't seem to be any real security impact from the bug - so unmarking this as a security issue now.
This was fixed in upstream commit https:/ /gitlab. gnome.org/ GNOME/gvfs/ commit/ a23eb6f14eb3cff a1585d4e5e566f7 79337d1e04
Uncertain whether this qualifies as a security issue - there doesn't seem to be any real security impact from the bug - so unmarking this as a security issue now.