Yes, it certainly a gaping security hope. Yet I cant bring myself to submit a patch