https://10alert.com/posts/gcp-cloud-composer-bug-let-attackers/