Vulnerability Research Bug Bounty CVE-2019-5450 Some basic HTML tags were rendered as Markup in directory names.
Vulnerability Research CVE-2018-19937 A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone.