Tennessee Valley Authority disclosed a bug submitted by tvmbug: https://hackerone.com/reports/1363001 [Source]