GitHub Security Lab · Report #807440
Java (Maven): Actually fix the use of insecure protocol to download/upload artifacts
$4,000bounty
283upvotes
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.