Closed 4k4xs4pH1r3 closed 6 years ago
We don't have a bug bounty program or a budget for one. jQuery team members are all volunteers. Responsible disclosure would start with a private email to security@jquery.com .
Thank you for your interest, but as @dmethvin said, we don't have a budget for bug bounties. Also, often what is perceived as a vulnerability is really not. But, if there is a bug or vulnerability we can address, feel free to open separate issues, including a test case for each one so we can evaluate more readily. Thanks.
Over this site jQuery CDN https://94.31.29.54/ I detected the below vulnerabilities, my objective is that you see this issue as Bug Bounty and give me an reward for this, thanks.
I tried to upload in PDF format the report, but appear this error: Something went really wrong, and we can’t process that file.
I put the vulnerabilities directly in the issue.