Here we maintain a list of security researchers and their findings, to recognize them for having responsibly disclosed security issues to us.
| Date | Component | Disclosure | Researcher |
|---|---|---|---|
| 28 June 2025 | Portal | Email flooding via password reset | Parth Narula |
| 2 June 2025 | Webform | Verification code brute force flaw and chained HTML injection | Mohd Aqudas Gulzar Saifi |
| 27 May 2025 | Webform | Stored HTML Injection in Email Verification Flow | Vaibhav Shinde |