It seems like the issue of "When using a password reset flow to unlock a user account, the process may fail if the user has MFA enabled." was noted in the 1.43.0 release. What exactly was the fix?

I am currently trying to set up the forgot password flow for users with locked account (ie. too many failed_login_attempts). For uses who have MFA enabled, they need to complete step up challenge first however I am getting a 500 error when trying to hit the /two-factor/login point to get a trustToken. How do I complete the forgot password flow with trust token for MFA users when their accounts are locked?