Found another bug and reported it to security team by email.