Someone who fucked up in one way or another. Anything that’s not a security related incident with a CVE entry is bound to be a major oversight by someone. Remember over promising is a fuck up, not business as usual in a healthy organisation.