Please do not file an open issue for ongoing security bugs. Instead, email us directly with your findings at security@open.gov.sg.