Brave Software disclosed a bug submitted by nishimunea: https://hackerone.com/reports/1068505 – Bounty: $250 [Source]