huntr Introduction

huntr follows a structured 4-step process for vulnerability disclosure. First, researchers submit vulnerabilities through a secure form. Then, huntr validates the submission by contacting the project maintainer and allowing 31 days for a response. If validated, the researcher is rewarded a bounty and a CVE is issued. Project maintainers can also receive bounties for patching vulnerabilities. Finally, reports are published after 90 days by default, with options for extensions. Throughout this process, huntr acts as an intermediary, managing communication between researchers and maintainers while ensuring proper handling and disclosure of vulnerabilities.