Fix CVE-2022-0185

See https://seclists.org/oss-sec/2022/q1/54

Not sure what the workflow is for this repo, but I can slap the patch on top (once gitlab finished forking).