Security Radar 5

[gratipay-bot]

← Security Radar 4

---

Docs

http://inside.gratipay.com/howto/sweep-the-radar

Scope

This radar covers Gratipay's security program, including:

• our HackerOne account
• the "Handle Security Issues" document
• Security Team issues
• the legacy Hall of Fame page on gratipay.com
• the @gratipay/security team
• the https://github.com/gratipay/security repo
• the [email protected] email address

Queue

Unclear Risk

https://hackerone.com/reports/117187
https://hackerone.com/reports/117195

Severe Risk

Moderate Risk

Mild Risk

https://hackerone.com/reports/76304
https://hackerone.com/reports/76306
https://hackerone.com/reports/80907
https://hackerone.com/reports/90805
https://hackerone.com/reports/108645

https://hackerone.com/reports/109161
https://hackerone.com/reports/111325
https://hackerone.com/reports/115284
https://hackerone.com/reports/117739
https://hackerone.com/reports/117984

https://hackerone.com/reports/118699
https://hackerone.com/reports/120026
https://hackerone.com/reports/123688
https://hackerone.com/reports/123697
https://hackerone.com/reports/118023

Theoretical Risk

https://hackerone.com/reports/78151
https://hackerone.com/reports/90777
https://hackerone.com/reports/90778
https://hackerone.com/reports/116147
https://hackerone.com/reports/117142

https://hackerone.com/reports/117330
https://hackerone.com/reports/117386
https://hackerone.com/reports/117833
https://hackerone.com/reports/123742
https://hackerone.com/reports/123942

https://hackerone.com/reports/123897
https://hackerone.com/reports/124096