Great Code for Less VS Huntr by 418sec

Great Code for Less mentions (0)

Huntr by 418sec mentions (11)

• [SECURITY] Found a vulnerability with high severity in your project

  I have disclosed this issue on the huntr.dev platform. Supposedly, maintainers with write access to the repository should be able to see the details in the following private submissions: https://huntr.dev/bounties/2469c3af-088c-468e-a37f-d35c01256d2f/. Source: over 1 year ago

• Here is another Immich's progress update, and everyone needs to know it (October 8th, 2022). Quality and security improvement.

  This update includes many QoS improvements for the app. The important one is fixing some critical security bugs. Thanks to Huntr.dev and their researchers for helping with testing and reaching out to notify us of the vulnerability. Source: over 1 year ago

• Get Paid to Contribute to Urllib3

  Https://issuehunt.io/issues https://www.bountysource.com/ https://huntr.dev/ Taken from https://www.google.com/search?client=firefox-b-d&q=open+source+bounty. - Source: Hacker News / almost 2 years ago

• How to properly disclose security issues?

  About a month back, I reported what I think is a security issue in the tensorflow/models repository. I disclosed this bug via huntr.dev as they had previous submissions to the repository. The security policy of the repository states that the security team gets back within 24 hours but it's been a month and I haven't heard back from them. The members at huntr.dev were kind enough to leave the following comment but... Source: almost 2 years ago

• CVE-2022-0329 and the problems with automated vulnerability management

  Currently, on huntr.dev, a user submits the report directly to the maintainer. The maintainer will then choose to mark it as valid or as invalid. When marking as valid, the maintainer receives a disclaimer that by clicking valid they agree that: 1) the security issue is valid and that 2) huntr may assign a CVE for the repository. So no, there was no automatic process that got triggered when the maintainer merged a... Source: over 2 years ago