Brave Software disclosed a bug submitted by world_languages: https://hackerone.com/reports/604945 [Source]