Can you try uploading a proof-of-concept package that can exploit it?