Every decision, on the record.
Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.
- highPGN-10301· undisclosed
Edge pool admission webhook can be bypassed with a legacy API version
Awaiting triage.
—New - highPGN-10307· undisclosed
Treasury export job runs with the requesting user's SAML attributes from a stale assertion
Under remediation.
—Triaged - mediumPGN-10312· undisclosed
Fleet console session fixation via pre-auth cookie
Under remediation.
—Triaged - mediumPGN-10318· undisclosed
Mobile banking PIN retry counter resets on app reinstall
Not disclosed. Private program.
Tessera Bank@quietcoilImproper Restriction of Excessive Authentication Attempts06 Nov 2026triage 8.3h$5,000Triaged - criticalPGN-10482
SAML assertion accepted after signature element is relocated under a wrapped Response
A second Assertion placed before the signed one was processed by the relying-party parser while the signature check ran against the original. Proof used two researcher tenants.
Stratos ID@saltmarshImproper Verification of Cryptographic Signature29 Oct 2026triage 3.5hresolved 4.3d$96,000Resolved - criticalPGN-10479
Cross-tenant secret read via node-local metadata proxy in shared edge pool
Pods on the edge pool could reach a node-local proxy that did not scope credentials by namespace. The proof read a secret from a second researcher-owned tenant only.
$85,000Resolved - criticalPGN-10471
Password reset email array accepts two recipients when body is sent as JSON
The form-encoded reset endpoint also accepted JSON; an array value for email delivered the reset link to both addresses. Victim account was a second researcher account.
$24,000Resolved - criticalPGN-10468
Issuing API lets a sandbox key approve authorizations on a live card program it does not own
Authorization-decision webhooks were matched by card-program id without checking the key's environment. Two researcher programs were used; no third-party funds moved.
$60,000Resolved - highPGN-10463
Settlement amount mutated after signature via delimiter-free field concatenation
The HMAC covered concatenated fields with no separator, so a shifted boundary between amount and session id verified under the original signature.
$16,000Resolved - highPGN-10457
JMAP blob download ignores mailbox ACL for shared calendars
Attachments on events in a calendar shared read-only could be fetched by blob id after the share was revoked.
$11,000Resolved - highPGN-10451
Store checkout race duplicates limited cosmetic on concurrent redeem
Thirty sequential redeem calls succeeded before the first test of concurrency; the inventory check and grant were not atomic.
$6,500Resolved - highPGN-10444
HTTP/2 to HTTP/1.1 downgrade desync on courier API edge allows request queue poisoning
A CRLF in an H2 header value survived translation at the edge. Impact was framed as capture of the next researcher-owned request on the same connection.
$7,000Resolved - criticalPGN-10439· undisclosed
FHIR $everything operation returns documents across seeded test clinics
Not disclosed. Private program.
$32,000Resolved - criticalPGN-10433
Electron renderer escapes sandbox through embed preview protocol handler
A crafted embed URL reached a privileged protocol handler from the renderer. Proof launched the calculator on the researcher's own machine.
$28,000Resolved - criticalPGN-10428
Passkey ceremony accepts attestation for a different relying-party id under a wildcard origin
rpIdHash was compared against a wildcard-expanded set that included a sibling subdomain the researcher controlled.
$70,000Resolved - mediumPGN-10421
Webhook signing secret rotation leaves previous secret valid indefinitely
Rotated secrets were kept for a 24h grace window that was never enforced; a 30-day-old secret still verified.
$3,000Resolved - highPGN-10416· undisclosed
Open-banking consent screen approves scopes beyond those displayed
Not disclosed. Private program.
$20,000Resolved - mediumPGN-10411
Stored XSS in shared template title renders in admin audit log
Template titles were escaped in the editor but inserted as HTML in the workspace audit view that admins open.
$2,200Resolved - criticalPGN-10399
OCPP simulator can register as an existing charger id and receive its remote-start commands
Boot notifications were trusted by charger id alone within the researcher's provisioned virtual fleet.
$45,000Resolved
- Edge pool admission webhook can be bypassed with a legacy API versionhigh3d ago
- Treasury export job runs with the requesting user's SAML attributes from a stale assertionhigh5d ago
- Fleet console session fixation via pre-auth cookiemedium4d ago
- Mobile banking PIN retry counter resets on app reinstallmedium$5,000
- SAML assertion accepted after signature element is relocated under a wrapped Responsecritical$96k
- Cross-tenant secret read via node-local metadata proxy in shared edge poolcritical$85k