If both of the PRs mentioned here have been merged, do we get to close this? https://github.com/osquery/osquery/security/advisories/GHSA-hx5j-mvj5-rq2m