Bug Bounty 3

• From Client-Side JavaScript to GitHub Admin: A Supply Chain Exposure Feb 5, 2026
• Bypassing Rate Limits via HTTP/2 Single-Packet Attack: A Race Condition Story Oct 13, 2025
• OAuth Account Takeover: Exploiting Email Change Without Re-authentication Nov 24, 2024