Brave Software disclosed a bug submitted by nishimunea: https://hackerone.com/reports/1436142 – Bounty: $1000 [Source]