Thanks for the report. I have just sent a bug report to their security address about this. It would probably be better if people submitted these bugs directly

Thanks for the report. I have just sent a bug report to their security address about this. It would probably be better if people submitted these bugs directly to the vendor rather than making them immediately public. If you don't know how to do this, or how to describe the bug, you can let me know and I will do it on your behalf. My contact details are in my HN profile