This vulnerability was a bugger to fix correctly
"bugger" ... "bug" ... see what I did there, right? Tough crowd :-)

On a completely serious note ...

Is there any timeline on fixing the issue where forum posts which require login access are included in the forum search results WITHOUT needing to log in?