| Company | Asset | Asset Type | Coverage | Severity | Bounty | Create Date | Resolved |
|---|---|---|---|---|---|---|---|
| Mapbox | Mapbox Docs MCP Server | SourceCode | In Scope | Critical | Eligible | 2026-07-17 | 0 |
| Mapbox | Mapbox DevKit MCP Server | SourceCode | In Scope | Critical | Eligible | 2026-07-17 | 0 |
| Mapbox | Mapbox MCP Server | SourceCode | In Scope | Critical | Eligible | 2026-07-17 | 0 |
| Mapbox | Mapbox GL Geocoder | SourceCode | In Scope | High | Eligible | 2026-07-17 | 0 |
| Mapbox | Search SDK for Android | SourceCode | In Scope | Critical | Eligible | 2026-07-17 | 0 |
| Mapbox | Search SDK for iOS | SourceCode | In Scope | Critical | Eligible | 2026-07-17 | 0 |
| Mapbox | Navigation SDK for Android | SourceCode | In Scope | Critical | Eligible | 2026-07-17 | 0 |
| Mapbox | Navigation SDK for iOS | SourceCode | In Scope | Critical | Eligible | 2026-07-17 | 0 |
| Mapbox | Maps SDK for Flutter | SourceCode | In Scope | Critical | Eligible | 2026-07-17 | 0 |
| Kiwi.com | https://github.com/kiwicom/request-session | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/pg2avro | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/orbit | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/navigation-compose-typed | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/konfetti | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/kiwi-structlog-config | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/kiwi-json | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/kiwi-cache | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/k8s-vault-operator | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/js-iam-middleware | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Kiwi.com | https://github.com/kiwicom/flask-ninja | SourceCode | In Scope | High | Eligible | 2026-07-15 | 0 |
| Superhuman (formerly Grammarly) | Superhuman Mail Desktop App | OtherAsset | In Scope | Critical | Eligible | 2026-07-15 | 0 |
| Superhuman (formerly Grammarly) | Superhuman Mail Chrome Extension | OtherAsset | In Scope | Critical | Eligible | 2026-07-15 | 0 |
| Superhuman (formerly Grammarly) | mail.superhuman.com | Domain | In Scope | Critical | Eligible | 2026-07-15 | 0 |
| Mozilla | Firefox Homepage Newtab | OtherAsset | In Scope | Critical | Eligible | 2026-07-10 | 0 |
| SIX Group | http://ibt-test.six-group.com | Url | In Scope | Critical | Eligible | 2026-07-09 | 0 |
| Temu | ads.temu.com | Domain | In Scope | Critical | Eligible | 2026-07-09 | 0 |
| Figma | Figma Weave | OtherAsset | In Scope | Critical | Eligible | 2026-07-07 | 0 |
| Hilton | Managed Property Assets | OtherAsset | In Scope | Critical | Eligible | 2026-07-07 | 0 |
| Hilton | Hilton Third Party Applications | OtherAsset | In Scope | Critical | Eligible | 2026-06-24 | 0 |
| Hilton | com.hilton.android.hhonors | AndroidPlayStore | In Scope | Critical | Eligible | 2026-06-24 | 0 |
| Hilton | id635150066 | IosAppStore | In Scope | Critical | Eligible | 2026-06-24 | 0 |
| Hilton | Hilton Franchised Properties | OtherAsset | In Scope | Critical | Eligible | 2026-06-24 | 0 |
| Malwarebytes | Any other ThreatDown asset | OtherAsset | In Scope | Critical | Eligible | 2026-06-23 | 0 |
| SIX Group | https://disclosure-test.six-exchange-regulation.com/ | Url | In Scope | Critical | Eligible | 2026-06-23 | 0 |
| Agoda Public | https://www.agoda.com/book/ | Url | In Scope | Critical | Eligible | 2026-06-14 | 0 |
| Home Bargains | https://hackerone-m1rtuq8orz.hbstaging.website/ | Url | In Scope | Critical | Eligible | 2026-06-12 | 0 |
| Judge.me | insights.judgeme.dev | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mercadobackoffice.com | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mpago.la | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mpago.li | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| MercadoLibre | mercadopago.com.ve | Domain | In Scope | Critical | Eligible | 2026-06-11 | 0 |
| Airtable | https://www.npmjs.com/package/@airtable/mcp-cli | SourceCode | In Scope | Critical | Eligible | 2026-06-09 | 1 |
| Airtable | mcp.staging.airtable.com | Domain | In Scope | Critical | Eligible | 2026-06-09 | 0 |
| PortSwigger Web Security | id.portswigger.net | Domain | In Scope | Critical | Eligible | 2026-06-09 | 0 |
| TikTok | *.soundon.global | Wildcard | In Scope | Critical | Eligible | 2026-06-08 | 1 |
| TikTok | www.soundon.global | Domain | In Scope | Critical | Eligible | 2026-06-08 | 0 |
| KHealth | *.pennmedicine.connect-visit.com | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.novanthealthvirtualprimarycare.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 1 |
| KHealth | *.primarycareondemand.mayoclinic.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |
| KHealth | *.hmh247.org | Wildcard | In Scope | Critical | Eligible | 2026-06-05 | 0 |