14:18:39 @jeffro256 will you or someone else provide a summary of the report outside of HackerOne? Or is this the sort of issue that needs to be patched before the community can read about it? 14:32:48 Hi everyone 15:43:59 cargodog: It will probably be private for a little while longer, while we confirm some details about it. But, maybe at the risk of speaking too soon, AFAICT, the main attack vector had already been fixed. There's some other valuable stuff in there, but that probably won't need to be private in development