Well they did leave out a lot of important information.

This site seems pretty good though: https://gpg.fail/
It has all the given vulnerabilities in text.

Now just need to read and understand all of them and find out which one explains the above comment and the answer to my question is probably another headache.