Potential Vulnerability in Lightning Backends: BOLT-11 'Payment Hash' Does Not Commit to Payment

"There is someone going around attempting to exploit this on various services, be sure you are not vulnerable."

https://www.nobsbitcoin.com/potential-vulnerability-in-lightning-backends-bolt-11-payment-hash-does-not-commit-to-payment/