CVEs & bug-bounty

Coordinated vulnerability disclosures.

Vulnerabilities I've reported, published here after they've been fixed and cleared for public disclosure. Embargoed findings are listed once the coordination window closes.