Although this is simple form state managing hook and this file should not exist, but if you find some vulnerability, you can reach out at akshay.nm92@gmail.com Since its a security vulnerability I'd suggest avoid creating an issue about it.