Hi,
an insecure temporary file creation was reported to the chillispot some time ago.
This is Debian bug #500181.
Unfortunately the vulnerability is not important enough to get it fixed via
regular security update in Debian stable. It does not warrant a DSA.