CVE-2025-50200: please clarify fixing changes in 4.0.8

[apoleon]

Describe the bug

CVE-2025-50200 has been reported for rabbitmq-server.

GHSA-gh3x-4x42-fvq8

The reporter claims the fix was applied in version 4.0.8. Could you please clarify which of the changes [1] actually fixed the problem and ideally link to the corresponding git commit on github.com? Thanks in advance

[1] https://github.com/rabbitmq/rabbitmq-server/blob/7a7eb55fa9d240247c9285cc421e98fb2d093e98/release-notes/4.0.8.md

Reproduction steps

...

Expected behavior

Expected more information about CVE-2025-50200 in version 4.0.8 changelog

Additional context

No response

[ansd]

#13612 is the fix.