Tennessee Valley Authority disclosed a bug submitted by tvmbug: https://hackerone.com/reports/1362995 [Source]