SideFX disclosed a bug submitted by harshniture12: https://hackerone.com/reports/2264982 – Bounty: $300 [Source]