Attack surface
1 in-scope
Dovecot IMAP Server and Pigeonhole… packages" and "Source code")source_codeAll content which is not listed as… system operated by customersother"Scopes" in this program refer to …se artefacts are out of scopeother— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Dovecot.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
first indexed
52d ago · 1 in-scope assets
// only one snapshot on record — changes appear from the next ingest onward
{
"id": "dovecot",
"name": "Dovecot",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "open-source",
"target": "Dovecot IMAP Server and Pigeonhole SIEVE (see \"Software packages\" and \"Source code\")"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All content which is not listed as \"Scopes\", especially any production system operated by customers"
},
{
"type": "other",
"target": "\"Scopes\" in this program refer to the binary packages and source-code provided there, the systems providing those artefacts are out of scope"
},
{
"type": "other",
"target": "Everything that is not directly related to the application or source-code in scope (e.g. GitHub, domain settings)"
},
{
"type": "other",
"target": "Bugs that require filesystem level access to modify content to cause data corruption or path traversal issues as out of scope."
}
]
},
"disabled": false,
"max_bounty": 5000,
"min_bounty": 100
}Everything that is not directly re…e.g. GitHub, domain settings)Bugs that require filesystem level…ersal issues as out of scope.other