They did provide plenty detail, just not to the guy on call who has to read the announcement and react quickly.

Meanwhile, they have the changelog and a test PoC for the one looking to exploit it.