Kubernetes disclosed a bug submitted by ginoah: https://hackerone.com/reports/1620702 – Bounty: $2500 [Source]