LY Corporation disclosed a bug submitted by never_die: https://hackerone.com/reports/2473862 [Source]