418sec / huntr

Public Roadmap | huntr.dev
https://huntr.dev
265 stars 90 forks source link

Stale reports get published #2164

Open psmoros opened 2 years ago

psmoros commented 2 years ago

Pitch

Currently researchers complain that many of their reports never get seen. To address this issue we're thinking of publishing pending and unfixed reports after a set amount of time and after giving the maintainer a fair warning on a public channel.

Clarification: As long as disclosures / fixes don't get validated by the maintainer, they won't get paid nor receive a CVE. This initiative only affects visibility and nothing else.

JamieSlome commented 2 years ago

Nice idea! 👍

JamieSlome commented 2 years ago

@adam-nygate @psmoros - could we arrange a time to spec. this out together? Perhaps an hour later this afternoon?