tally.so also got affected. https://www.metabase.com/blog/security-update