This isn't a coupling between those two components; it's a common dependency with a bug that was exposed by one of the components. Once the bug in the dependency is fixed, anybody relying on the incorrect behavior is hosed.