
Usenix TCP middlebox researchers notified PA of this in 2021 *last year*
In this research https://www.usenix.org/system/files/sec21fall-bock.pdf the researchers say they reached out to Palo Alto about this in 2021 *last year* - how has it taken PA almost a year to realize they can be vulnerable?