If you want to see it clearly, here's the link :https://muffin.ink/blog/scratch-vulnerability-disclosure/
