{"results":[{"logo_url":"https://logos.bugcrowdusercontent.com/logos/eee6/48ca/31319ece/3b82dca429ba76bf224abbec781356a8_OpenAI-black-monoblossom.png","logo_color":"fff","engagement_name":"OpenAI","engagement_code":"openai","engagement_in_progress":true,"engagement_path":"/engagements/openai","visibility_public":true,"researcher_username":"W0rty","researcher_profile_path":"https://bugcrowd.com/h/W0rty","crowdstream_name_visible":true,"amount":"$1,000","points":40,"crowdstream_amount_visible":true,"disclosure_report_url":"/disclosures/3c0e5972-74ad-46a3-ab56-169db3d4c66f/backdooring-the-next-release-of-codex-through-github-action-pipeline-exploit-chaining","title":"Backdooring the next release of Codex through Github Action Pipeline exploit chaining","disclosed_at":"29 Sep 2026","id":"56fdcd94-1cba-4d40-930e-a77b9edb673d","disclosed":true,"priority":1,"substate":"resolved","created_at":"2026-05-13T21:49:28.941Z","accepted_at":"9 Jul 2026","claimed_at":null,"closed_at":"2026-07-09T00:34:51.417Z","target":"ChatGPT Desktop","is_pinned":false,"submission_state_text":"Submission accepted on target: ChatGPT Desktop","submission_state_date_text":"Disclosed on 29 Sep 2026"},{"logo_url":"https://logos.bugcrowdusercontent.com/logos/eee6/48ca/31319ece/3b82dca429ba76bf224abbec781356a8_OpenAI-black-monoblossom.png","logo_color":"fff","engagement_name":"OpenAI","engagement_code":"openai","engagement_in_progress":true,"engagement_path":"/engagements/openai","visibility_public":true,"researcher_username":"Moch_Azril","researcher_profile_path":"https://bugcrowd.com/h/Moch_Azril","crowdstream_name_visible":false,"disclosure_report_url":"/disclosures/3749e3ff-47af-4aa7-a8d9-e513b9185696/atlas-browser-bypass-the-full-screen-notification-security-layer-by-displaying-a-permission-dialog-to-open-an-external-app","title":"[Atlas Browser]Bypass the full-screen notification security layer by displaying a permission dialog to open an external app","disclosed_at":"14 Sep 2026","id":"df797471-496c-4e30-be0a-e794c171411e","disclosed":true,"priority":4,"substate":"resolved","created_at":"2026-06-03T15:37:34.702Z","accepted_at":"4 Jun 2026","claimed_at":null,"closed_at":"2026-07-16T21:40:21.356Z","target":"Atlas","is_pinned":false,"submission_state_text":"Submission accepted on target: Atlas","submission_state_date_text":"Disclosed on 14 Sep 2026"},{"logo_url":"https://logos.bugcrowdusercontent.com/logos/eee6/48ca/31319ece/3b82dca429ba76bf224abbec781356a8_OpenAI-black-monoblossom.png","logo_color":"fff","engagement_name":"OpenAI","engagement_code":"openai","engagement_in_progress":true,"engagement_path":"/engagements/openai","visibility_public":true,"researcher_username":"Moch_Azril","researcher_profile_path":"https://bugcrowd.com/h/Moch_Azril","crowdstream_name_visible":false,"disclosure_report_url":"/disclosures/5f6ab635-bbbd-4bc5-a964-73c3e57c09f6/atlas-browser-bypassing-full-screen-notification-via-right-click-context-menu-leads-to-spoofing-attacks","title":"[Atlas Browser]Bypassing Full-Screen Notification via Right-Click Context Menu Leads to Spoofing Attacks","disclosed_at":"14 Sep 2026","id":"416dba73-dd44-410a-9a33-f97bfaacb7f8","disclosed":true,"priority":4,"substate":"resolved","created_at":"2026-06-10T10:26:54.564Z","accepted_at":"10 Jun 2026","claimed_at":null,"closed_at":"2026-08-11T20:47:54.567Z","target":"Atlas","is_pinned":false,"submission_state_text":"Submission accepted on target: Atlas","submission_state_date_text":"Disclosed on 14 Sep 2026"},{"logo_url":"https://logos.bugcrowdusercontent.com/logos/eee6/48ca/31319ece/3b82dca429ba76bf224abbec781356a8_OpenAI-black-monoblossom.png","logo_color":"fff","engagement_name":"OpenAI","engagement_code":"openai","engagement_in_progress":true,"engagement_path":"/engagements/openai","visibility_public":true,"researcher_username":"Moch_Azril","researcher_profile_path":"https://bugcrowd.com/h/Moch_Azril","crowdstream_name_visible":false,"disclosure_report_url":"/disclosures/4723a6a6-cb0f-4248-a36d-ac7988319b4b/atlas-browser-fullscreen-notification-is-missing-when-requestfullscreen-is-called-from-a-popup-window","title":"[Atlas Browser] Fullscreen notification is missing when requestFullscreen() is called from a popup window","disclosed_at":"14 Sep 2026","id":"e892fa67-462c-4f86-8eda-73ec18974093","disclosed":true,"priority":4,"substate":"resolved","created_at":"2026-05-01T15:50:22.120Z","accepted_at":"12 Sep 2026","claimed_at":null,"closed_at":"2026-09-12T23:30:46.181Z","target":"Atlas","is_pinned":false,"submission_state_text":"Submission accepted on target: Atlas","submission_state_date_text":"Disclosed on 14 Sep 2026"},{"logo_url":"https://logos.bugcrowdusercontent.com/logos/eee6/48ca/31319ece/3b82dca429ba76bf224abbec781356a8_OpenAI-black-monoblossom.png","logo_color":"fff","engagement_name":"OpenAI","engagement_code":"openai","engagement_in_progress":true,"engagement_path":"/engagements/openai","visibility_public":true,"researcher_username":"Moch_Azril","researcher_profile_path":"https://bugcrowd.com/h/Moch_Azril","crowdstream_name_visible":true,"amount":"$200","points":5,"crowdstream_amount_visible":true,"disclosure_report_url":"/disclosures/44e37fb3-3a52-4d7d-8429-c3c78b77f514/atlas-browser-fullscreen-notification-overlap-by-screen-share-permission-dialog-leading-to-ui-spoofing-and-unauthorized-screen-capture-in-chatgpt-atlas-for-macos","title":"[Atlas Browser] Fullscreen Notification Overlap by Screen Share Permission Dialog Leading to UI Spoofing and Unauthorized Screen Capture in ChatGPT Atlas for macOS","disclosed_at":"14 Sep 2026","id":"7990d4ce-7b3e-4b57-ac44-14ed0de3e9e5","disclosed":true,"priority":4,"substate":"resolved","created_at":"2026-05-05T15:21:36.512Z","accepted_at":"12 Sep 2026","claimed_at":null,"closed_at":"2026-09-12T23:37:49.497Z","target":"Atlas","is_pinned":false,"submission_state_text":"Submission accepted on target: Atlas","submission_state_date_text":"Disclosed on 14 Sep 2026"},{"logo_url":"https://logos.bugcrowdusercontent.com/logos/eee6/48ca/31319ece/3b82dca429ba76bf224abbec781356a8_OpenAI-black-monoblossom.png","logo_color":"fff","engagement_name":"OpenAI","engagement_code":"openai","engagement_in_progress":true,"engagement_path":"/engagements/openai","visibility_public":true,"researcher_username":"Teringette-adamuzonyi","researcher_profile_path":"https://bugcrowd.com/h/Teringette-adamuzonyi","crowdstream_name_visible":true,"amount":"$2,000","points":40,"crowdstream_amount_visible":true,"disclosure_report_url":"/disclosures/5d10a6d3-734e-401d-8871-b141de740a46/urgent-critical-data-breach-cross-user-phi-pii-leakage-via-prompt-injection-non-malicious-discovery","title":"URGENT: CRITICAL DATA BREACH - Cross-User PHI/PII Leakage via Prompt Injection - Non-malicious discovery","disclosed_at":"19 Aug 2026","id":"b2e0b5f4-a859-4c25-84bf-1d877b9450a3","disclosed":true,"priority":1,"substate":"resolved","created_at":"2026-05-06T12:02:56.941Z","accepted_at":"18 Jun 2026","claimed_at":null,"closed_at":"2026-06-18T21:03:09.041Z","target":"ChatGPT Web","is_pinned":false,"submission_state_text":"Submission accepted on target: ChatGPT Web","submission_state_date_text":"Disclosed on 19 Aug 2026"},{"logo_url":"https://logos.bugcrowdusercontent.com/logos/eee6/48ca/31319ece/3b82dca429ba76bf224abbec781356a8_OpenAI-black-monoblossom.png","logo_color":"fff","engagement_name":"OpenAI","engagement_code":"openai","engagement_in_progress":true,"engagement_path":"/engagements/openai","visibility_public":true,"researcher_username":"jodyritonga","researcher_profile_path":"https://bugcrowd.com/h/jodyritonga","crowdstream_name_visible":false,"disclosure_report_url":"/disclosures/6cf12025-6b26-4200-a820-0fa073d9d9f6/atlas-browser-fullscreen-toast-can-be-hidden-by-repeated-constraint-validation-popups","title":"[Atlas Browser] Fullscreen Toast Can Be Hidden by Repeated Constraint Validation Popups","disclosed_at":"9 Jul 2026","id":"b356b65b-62b5-4b75-9156-83fdbf6da818","disclosed":true,"priority":4,"substate":"resolved","created_at":"2026-05-04T00:09:15.417Z","accepted_at":"11 May 2026","claimed_at":null,"closed_at":"2026-07-09T23:16:21.184Z","target":"Atlas","is_pinned":false,"submission_state_text":"Submission accepted on target: Atlas","submission_state_date_text":"Disclosed on 9 Jul 2026"}],"cutoff_date_label":"6 months","pagination_meta":{"total_pages":1,"totalCount":7,"limit":20,"currentPage":1}}