Open redirect

Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability...