Please do not report a security vulnerability in the open, instead contact "luke@rdrocket.com" , so if need be the issue can be managed under responsible disclosure.