@biisent on WordPress.org and Slack
Created ticket #39945 on Core Trac:WP_Query::get_posts fails to correctly sanitize 'posts_per_page'