Previous discussion on the same vulnerability https://news.ycombinator.com/item?id=11631292