GitHub Security Lab disclosed a bug submitted by maikypedia: https://hackerone.com/reports/1928279 – Bounty: $2300 [Source]