ParentFull threadmatbatt38·BTW, the person who discovered the issue on HackerOne got a 5k$ bountyView on HN