Every decision, on the record.
Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.
- criticalPGN-10482
SAML assertion accepted after signature element is relocated under a wrapped Response
A second Assertion placed before the signed one was processed by the relying-party parser while the signature check ran against the original. Proof used two researcher tenants.
Stratos ID@saltmarshImproper Verification of Cryptographic Signature29 Oct 2026triage 3.5hresolved 4.3d$96,000Resolved - criticalPGN-10479
Cross-tenant secret read via node-local metadata proxy in shared edge pool
Pods on the edge pool could reach a node-local proxy that did not scope credentials by namespace. The proof read a secret from a second researcher-owned tenant only.
$85,000Resolved - criticalPGN-10471
Password reset email array accepts two recipients when body is sent as JSON
The form-encoded reset endpoint also accepted JSON; an array value for email delivered the reset link to both addresses. Victim account was a second researcher account.
$24,000Resolved - criticalPGN-10468
Issuing API lets a sandbox key approve authorizations on a live card program it does not own
Authorization-decision webhooks were matched by card-program id without checking the key's environment. Two researcher programs were used; no third-party funds moved.
$60,000Resolved - criticalPGN-10439· undisclosed
FHIR $everything operation returns documents across seeded test clinics
Not disclosed. Private program.
$32,000Resolved - criticalPGN-10433
Electron renderer escapes sandbox through embed preview protocol handler
A crafted embed URL reached a privileged protocol handler from the renderer. Proof launched the calculator on the researcher's own machine.
$28,000Resolved - criticalPGN-10428
Passkey ceremony accepts attestation for a different relying-party id under a wildcard origin
rpIdHash was compared against a wildcard-expanded set that included a sibling subdomain the researcher controlled.
$70,000Resolved - criticalPGN-10399
OCPP simulator can register as an existing charger id and receive its remote-start commands
Boot notifications were trusted by charger id alone within the researcher's provisioned virtual fleet.
$45,000Resolved - criticalPGN-10349
HelixVault withdraw path skips share recomputation after emergency pause lift
Reproduced on a mainnet fork with a Foundry test; the top of the critical band was paid without negotiation.
$75,000Resolved - criticalPGN-10324
Symlink inside workspace import archive reads server configuration
The import worker extracted archives with symlinks intact. The proof read the worker's own environment file and nothing else.
$26,000Resolved
- SAML assertion accepted after signature element is relocated under a wrapped Responsecritical$96k
- Cross-tenant secret read via node-local metadata proxy in shared edge poolcritical$85k
- Password reset email array accepts two recipients when body is sent as JSONcritical$24k
- FHIR $everything operation returns documents across seeded test clinicscritical$32k