Perhaps they have not updated their databases that the issue was resolved, and they still report this for the previous version of string translation.
You can see for example here hidden link, they say that "No patched version available.", However there is already a new version which fixed this security issue.