-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Thanks for your input.
As I don't see a reliable way to determine if someone runs a vulnerable version (in a passive way) and I don't want to spam anyone I drop my original intention of trying to contact operators of vulnerable Tor relays.