This is too much texts for a security vulnerability. They can just create an hotfix for it.