3 ms·

Also not following general polite disclosure on a security issue... Tell them privately first, ideally with a repro