FreeAPI vulnerability