Brave Software disclosed a bug submitted by nishimunea: https://hackerone.com/reports/1184379 – Bounty: $500 [Source]