🛡️ Security

Bug Bounty Program

A vendor-run program that pays external researchers for responsibly disclosed vulnerabilities, usually through a platform such as HackerOne. Many critical fixes, including GitLab's September 2026 patch release, originate from bug bounty reports.

📚 Deep Dive

Learn Article

How Path Traversal Bugs Let Attackers Read Files Outside the Web Root

Path traversal turns a filename parameter into a read of any file the server can open. Learn why filters fail, what confinement means, and why a file read can be a full compromise.

intermediate 6 min read

Back to Glossary