readme.md

Title

Yarn transfers npm credentials over unencrypted http connection

URL

https://hackerone.com/reports/640904

Severity score

8.2

Reporter

chalker

Bounty paid

null

---

Title

Cloudflare does not sufficiently truncate credit card numbers in invoices

URL

https://hackerone.com/reports/293276

Severity score

null

Reporter

webster

Bounty paid

null

---

Title

ChaCha20-Poly1305 with long nonces

URL

https://hackerone.com/reports/506040

Severity score

7.4

Reporter

jorandirkgreef

Bounty paid

$500

---