OtherVulnerabilities are never limited to a set list. Any bug that escalates a user’s privileges or causes unexpected behavior with an impact to the integrity or confidentiality of our users’ data will be considered.
It is often the types of vulnerabilities we haven’t thought about that are the most interesting!
| 1 | 1000 pts Rohit Dua Bypass organization paid plan billing validation | |
| 2 | 500 pts Himanshu Mehta DLL hijacking in Git Large File Storage (LFS) installer | |
| 3 | 500 pts Rhys Elsmore Phishing vector on Markdown preview endpoint | |
| 4 | 5000 pts Laël Cellier Memory corruption in Git | |
| 5 | 3000 pts joernchen of Phenoelit Git LFS code execution |