Top 1 at Alshaya Vulnerability Disclosure Program.  
 https://hackerone.com/alshaya/thanks