Comment 1 for bug 2032682

Sorry, since this was opened as a normal bug it went unnoticed by the VMT. I've now switched it to be a security bug for better tracking, which will hopefully encourage it to be addressed more quickly. Also, to be clear, Heat uses https://storyboard.openstack.org/#!/project/openstack/heat for defect tracking, according to its project page on LP. I've opened https://storyboard.openstack.org/#!/story/2011001 now to bring it to their attention.