Sorry, since this was opened as a normal bug it went unnoticed by the VMT. I've now switched it to be a security bug for better tracking, which will hopefully encourage it to be addressed more quickly. Also, to be clear, Heat uses https://storyboard.openstack.org/#!/project/openstack/heat for defect tracking, according to its project page on LP. I've opened https://storyboard.openstack.org/#!/story/2011001 now to bring it to their attention.
Sorry, since this was opened as a normal bug it went unnoticed by the VMT. I've now switched it to be a security bug for better tracking, which will hopefully encourage it to be addressed more quickly. Also, to be clear, Heat uses https:/ /storyboard. openstack. org/#!/ project/ openstack/ heat for defect tracking, according to its project page on LP. I've opened https:/ /storyboard. openstack. org/#!/ story/2011001 now to bring it to their attention.