From fe237fbf4a5dd777c8762702386fc16f44f1ab06 Mon Sep 17 00:00:00 2001 From: Maidul Islam Date: Thu, 29 May 2025 14:32:14 -0400 Subject: [PATCH] update program --- docs/internals/bug-bounty.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/internals/bug-bounty.mdx b/docs/internals/bug-bounty.mdx index d35e661e5..fddd41683 100644 --- a/docs/internals/bug-bounty.mdx +++ b/docs/internals/bug-bounty.mdx @@ -27,7 +27,7 @@ Bounties are based on severity, impact, and exploitability, as well as whether t | --- | --- | --- | | **Critical** | Full unauthorized access to secrets, authentication bypass, cross-tenant access, RCE, full compromise, etc | $2,000 - $5,000 | | **High** | Privilege escalation, project-level access without authorization, persistent DoS | $750 - $2,000 | -| **Medium** | Info disclosure, scoped DoS (e.g. ReDoS with auth), or minor access control issues | $250 - $1,000 | +| **Medium** | Info disclosure, scoped DoS (e.g. ReDoS with auth), or minor access control issues | $100 - $1,000 | | **Low / Informational** | Missing headers, CSP warnings, theoretical flaws, self-hosting misconfigurations | Recognition only |