U.S. Dept Of Defense disclosed a bug submitted by geej: https://hackerone.com/reports/2297561 [Source]