A false negative was acknowledged in April by your team resulting in your internal JIRA ticket as APPSEC-615 (Log in with Atlassian account)
Details can be found in your JIRA ticket APPSEC-615
SonarQube 10.2 still did not cover it
Please inform me about the status.
Your team already has the code to reproduce, also see attached screenshot.