Communitybug bountyvulnerability disclosurehackeroneopen source
HackerOne Delays IBB Payouts To Researcher
|
6.0
Jakub Ciolek reported two high-severity denial-of-service bugs in Argo CD last fall via HackerOne's Internet Bug Bounty; both were assigned CVE-2025-59538 and CVE-2025-59531 and fixed on Sept. 30, 2025. HackerOne did not respond for months, later citing a temporary operational backlog and saying reward payouts are pending and expected by end of Q1 2026. The communication gap undermines confidence in the IBB model.
Scoring Rationale
Highlights operational backlog and researcher impact, but limited scope restricted to one bounty program and single incident.
Practice interview problems based on real data
1,500+ SQL & Python problems across 15 industry datasets — the exact type of data you work with.
Try 250 free problems
