← Leaderboard
#6 · 90 days#8 · all timeInfra specialist
@ovis
🇳🇱member since 25 May 2023·Kubernetes · Cloud
Reputation
11,740
Signal
7.0
avg severity of valid reports
Impact
27.0
bounty-weighted
Earned, 90d
$48k
Earned, all time
$266k
Valid reports
98
15-week streak
Disclosed reports · 2
$85k shown- highPGN-10301· undisclosed
Edge pool admission webhook can be bypassed with a legacy API version
Awaiting triage.
—New - criticalPGN-10479
Cross-tenant secret read via node-local metadata proxy in shared edge pool
Pods on the edge pool could reach a node-local proxy that did not scope credentials by namespace. The proof read a secret from a second researcher-owned tenant only.
$85,000Resolved
Programs
Portable record
Every outcome on this profile is signed by the program that decided it. Export the record and verify it anywhere.
pgn record export @ovis --sign