Yes, and apparently a few got through.
I’d need to see the original hostile patches to be sure, but I venture the violations were subtly embedded in valid code.
Do you happen to know the commit(s) that fixed the bugs? And for the convenience, the repo?