Never really thought about the risk of having such a heap dump endpoint, but afterwards its always clearer. Interesting story about this exploit recently shared by Chaos Computer Club (video only in German). How would you protect the endpoint? Expose on private port, require authentication?