Other badge Other

Description

Vulnerabilities are never limited to a set list. Any bug that escalates a user’s privileges or causes unexpected behavior with an impact to the integrity or confidentiality of our users’ data will be considered.

It is often the types of vulnerabilities we haven’t thought about that are the most interesting!

Recently collected Other bounties:

1 patte 5000 pts Patrick Recher Insufficient authorization check of GitHub App repo creation
2 x-crossfire 3000 pts Dmitry Repository Service Hooks making non-http requests
3 evilpacket 2500 pts Adam Baldwin GitHub employee GitHub.com tokens exposed via NPM package
4 evilpacket 2500 pts Adam Baldwin NPM token for Electron exposed
5 Psychotropos 500 pts Ioannis Profetis GitHub Enterprise pre-receive hooks access sensitive localhost services