Missing Authorization on WPCOM Media API Attachment Parent

Hi JetPack Team,

Is there any reason why this security issue (https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/jetpack/jetpack-32-1612-missing-authorization-on-wpcom-media-api-attachment-parent) was not back ported to the 15.8.1 release when the two other issues fixed in 16.1.3 were? Is this not an issue for earlier versions of JetPack (meaning Wordfence’s information is incorrect). We’ve checked and the related files in 15.8.1 do seem to still contain the parent_id issue (perhaps this has been fixed at the WordPress.com level)?

Thanks for your assistance,

The page I need help with: [log in to see the link]