Haxatron

As a researcher, when I bundle up my occurences, I see that the maintainer will get less money (because the prize pot will decrease) even though they have more to...

I agree with this, this could also allow the possibility of retesting efforts.

Awesome! Perhaps the researcher can suggest one to fill up the details box and the maintainer can just verify / make any edits to it before releasing the advisory?

@WeichenXu123 - The fix for this report https://huntr.com/bounties/11209efb-0f84-482f-add0-587ea6b7e850/ in https://github.com/mlflow/mlflow/pull/10653 was incomplete. In particular it did not cover for 2 cases: When fragment in URL - `http://example.com/#/../../../../../../../../../../../../../../etc/` When params in...

@harupy @WeichenXu123 can you review this? @zpbrent. This was reported on 18 December 2023. Sorry.