Known v1.3.1+2020120201 exists to allow malicious users to perform an account takeover via a host header injection attack.
withknown known