[dTP90pN]

You seem to be incapable of understanding that it is quite possible and not at all unusual to internally carry patches to dependencies on which your commercial product is built. In this case, the patch merely involves changing two bytes[1], three if you include the pyOpenSSL bump, something a company like IBM should easily be able to do.

[1] https://github.com/mitmproxy/mitmproxy/commit/8c6ec5cb56fbf4...