New challenge worth $15,000

FAQ

Why are you doing this?
Where do I report bugs or feature requests?
Where can I find your Privacy Statement?
Where can I report new vulnerabilities?
Where can I see previously verified submissions?
What is the best way to contact a maintainer?
What is in scope?
What are your plans in the near future?
What are the implications when the maintainer is unresponsive?
How is the bounty reward calculated?
How do you assign CVEs?
How can I get in touch?
How do I get a CVE for my verified advisory?
How do I fund a project?
Can I edit the details of a report?
How do I know if my disclosure or fix has been rewarded?
How do I cash out my rewards/bounties?
Do you support custom security policies?
Are reports public or private by default?