Issues

• VRT Addition - AI Application Security > Agent Isolation Bypass

  bugcrowd/vulnerability-rating-taxonomy#521 · Filter by author zachary-satterly opened on Sep 28, 2026

• Add Broken Access Control edge case for Security-Control / Restriction Bypass

  bugcrowd/vulnerability-rating-taxonomy#520 · Filter by author PEXKIDDY opened on Sep 4, 2026
  1

• Revise the severity of UXSS

  taxonomy change
  bugcrowd/vulnerability-rating-taxonomy#518 · Filter by author triforce-bugcrowd opened on Jul 30, 2026

• P5: CSRF -> Action-Specific > Non-Sensitive Action

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#517 · Filter by author binbashsu-bugcrowd opened on Jul 23, 2026

• P5: EXIF Geolocation Data Not Stripped From Uploaded Images -> Self-Attack

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#516 · Filter by author binbashsu-bugcrowd opened on Jul 8, 2026

• VRT New Vulnerability Addition Request

  bugcrowd/vulnerability-rating-taxonomy#514 · Filter by author prithvi1337 opened on Jul 6, 2026
  2

• P1 VRT option for mass PII leakage

  enhancementneeds discussion
  bugcrowd/vulnerability-rating-taxonomy#513 · Filter by author an1msh opened on Jun 28, 2026
  4

• VRT New Vulnerability Addition Request

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#510 · Filter by author prithvi1337 opened on Jun 1, 2026
  2

• P4: Weak 2FA Implementation > On Password-Change

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#509 · Filter by author binbashsu-bugcrowd opened on Apr 27, 2026

• P5: WAF Bypass - Non-Sensitive Data Exposure

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#504 · Filter by author binbashsu-bugcrowd opened on Mar 30, 2026

• VRT Category Suggestion - Account 2FA not required on OAuth (P5)

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#500 · Filter by author binbashsu-bugcrowd opened on Mar 11, 2026

• VRT Category Suggestions - Failure to Invalidate Session on Account Deletion

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#498 · Filter by author binbashsu-bugcrowd opened on Mar 5, 2026

• VRT Category Suggestion - Spoofed location headers

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#495 · Filter by author binbashsu-bugcrowd opened on Feb 24, 2026

• VRT Category Suggestion - Failure to unlink OAuth Identity (P4)

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#494 · Filter by author binbashsu-bugcrowd opened on Feb 23, 2026

• VRT Category Suggestion - Sensitive Information in Cached Services

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#493 · Filter by author RRudder opened on Feb 11, 2026
  1

• Change priority for "Sandboxed Container Code Execution from P2 to P5

  enhancement
  bugcrowd/vulnerability-rating-taxonomy#490 · Filter by author amalmurali47 opened on Feb 5, 2026
  

• Clarify classification guidance for "Reset token not invalidated after email change" — consider ATO cases

  bugcrowd/vulnerability-rating-taxonomy#486 · Filter by author malek838 opened on Sep 24, 2025
  1

• VRT New Vulnerability Addition Request - JWT Misconfigurations

  bugcrowd/vulnerability-rating-taxonomy#482 · Filter by author prithvi1337 opened on Aug 1, 2025
  2

• Username Enumeration as P5

  bugcrowd/vulnerability-rating-taxonomy#481 · Filter by author michael-bey opened on Jul 29, 2025
  1

• Update VRT language to remove ambiguity between subcategories

  bugcrowd/vulnerability-rating-taxonomy#478 · Filter by author danzajork opened on Jul 19, 2025

• Reclassification and Addition Request: Lack of Email Confirmation on Email Change Variants

  bugcrowd/vulnerability-rating-taxonomy#477 · Filter by author Rivek619 opened on Jul 15, 2025
  1

• Request to Reclassify Account takeover by OTP Brute-Force Vulnerability from P5 to P2

  bugcrowd/vulnerability-rating-taxonomy#474 · Filter by author ghost opened on Jul 9, 2025

• Broken Links (recommendations.md)

  bugcrowd/vulnerability-rating-taxonomy#468 · Filter by author Phishician opened on Jun 20, 2025
  1

• VRT New Vulnerability Addition Request - Indicators of Attack

  bugcrowd/vulnerability-rating-taxonomy#466 · Filter by author miguelsantareno opened on May 29, 2025
  9

• VRT New Vulnerability Addition Request - Typosquatting

  bugcrowd/vulnerability-rating-taxonomy#465 · Filter by author miguelsantareno opened on May 29, 2025
  11