I'm assuming it isn't a security flaw, because ideally you would have fixed that already during your refactor.