Vulnerabilities are never limited to a set list. Any bug that escalates a user’s privileges or causes unexpected behavior with an impact to the integrity or confidentiality of our users’ data will be considered.
It is often the types of vulnerabilities we haven’t thought about that are the most interesting!
|1||2500 pts Adam Baldwin GitHub employee GitHub.com tokens exposed via NPM package|
|2||2500 pts Adam Baldwin NPM token for Electron exposed|
|3||5000 pts joernchen of Phenoelit GIT LFS code execution|
|4||2500 pts kyprizel Denial of service in babeld|
|5||1000 pts Rohit Dua Bypass organization paid plan billing validation|