Skip to content

Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Disclosed bug bounty reports
ReportStatusWeaknessSeverityDisclosedBountyVotes
Path traversal in Tempfile on windows OS due to unsanitized backslashesAnalysed#1131465ValidFile and Path HandlingMedium2021-04-07–54

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (3,935 analysed so far), which can be wrong. Data as of 2026-11-15.