Turns out we were sweeping for CVEs, not mines, all along