Vulnerability Issue Report

nftstorage / nft.storage

**Notice: Uploads Decommissioned - Existing Data is Safe!** NFT.Storage Classic (classic.nft.storage) offers free decentralized storage and bandwidth for NFTs on IPFS and Filecoin. June 2024 Update: No new uploads, but all existing data is safe. Try the new NFT.Storage, which preserves data in long term Filecoin storage. Go to app.nft.storage

https://classic.nft.storage

Other

619 stars 167 forks source link

Vulnerability Issue Report #2734

Closed serundengsapi closed 2 months ago

serundengsapi commented 2 months ago

Hello NFT.Storage Team!

Does nft.storage have a bug bounty program? I found a vulnerability issue with preauth account takeover at nft.storage website.

If you don't mind, please drop the email to this thread for i can send the details vulnerabilities.

Thank you,

elizabeth-griffiths commented 2 months ago

NFT.Storage is an open source project and a public good. We don't have budget for a bug bounty program right now, but we kindly ask you to contribute either through creating a PR or sending us an email so that we can resolve the thread. You can reach us at support @ nft.storage. Thanks!