Many thanks to Ori Hollander of the JFrog Vulnerability Research team for helping us discovering and fixing these vulnerabilities!