Advisories
Public disclosures.
Every high- or critical-severity finding closed through the Avala bug bounty program gets a public advisory here after coordinated disclosure. Each one describes what broke, who was affected, the root cause, the fix, and credits the researcher.
No advisories yet.
Advisories will appear here once the first high- or critical-severity report is disclosed publicly.
Submit a reportWant your name here? Submit a valid high- or critical-severity finding.