I have requested a CVE be assigned to this issue and intend to publish the details of the vulnerability and the exploit code when a patched version becomes available or after 60 days, whichever comes first. Please let me know if there any issues with this. Thanks!
Security vulnerability discovered