The vulnerability was caused by a community code submission: “Law enforcement has been notified and is working with us”
lol, its not even illegal