https://www.justsecurity.org/87615/changes-to-uk-surveillance-regime-may-violate-international-law/
Linking to the original article and not an article summarizing the article.
The court issue is that the UK government wants service providers in the UK to request permission to apply updates including security updates. And they may deny that permission if whatever they're fixing is currently in use by their national security service.
Ie if the government wants it broken so they can keep exploiting it they will prevent anybody from getting patched.