tag new version with DDoS fix

[theoshu]

Can you tag a new 3.4.13 release with the changes from this PR? We have been having to add a .cveignore for each vulnerability that pops from this.

#1555

[cure53]

Is there any CVE for this? Nothing that we are aware if... this was not a security bug, and we didn't treat it as such.

[cure53]

That being said, when we release 3.4.13 (in a few weeks), we will mention the fix, which hopefully does the trick.