HackerOne Bug Bounty Disclosure: curl-“globbing”-can-lead-to-denial-of-service-attacksbyiylz