— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Canva.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"name": "Canva",
"url": "https://bugcrowd.com/engagements/canva",
"allows_disclosure": false,
"managed_by_bugcrowd": true,
"safe_harbor": "partial",
"max_payout": 15000,
"targets": {
"in_scope": [
{
"type": "website",
"target": "https://www.canva.com",
"uri": "https://www.canva.com",
"name": "www.canva.com",
"ipAddress": ""
},
{
"type": "website",
"target": "https://www.canva.com/developers/",
"uri": "https://www.canva.com/developers/",
"name": "Canva Developer Portal",
"ipAddress": ""
},
{
"type": "other",
"target": "Apps SDK Sandboxing",
"uri": "",
"name": "Apps SDK Sandboxing",
"ipAddress": ""
},
{
"type": "api",
"target": "https://api.canva.com",
"uri": "https://api.canva.com",
"name": "api.canva.com",
"ipAddress": null
},
{
"type": "website",
"target": "*.canva.com",
"uri": "",
"name": "*.canva.com",
"ipAddress": null
},
{
"type": "website",
"target": "*.canva-apps.com",
"uri": "",
"name": "*.canva-apps.com",
"ipAddress": null
},
{
"type": "website",
"target": "https://*.canva.tech",
"uri": "https://*.canva.tech",
"name": "*.canva.tech",
"ipAddress": ""
},
{
"type": "website",
"target": "https://www.canva.com/en_au/help/chatgpt-templates/",
"uri": "https://www.canva.com/en_au/help/chatgpt-templates/",
"name": "Canva for ChatGPT",
"ipAddress": ""
},
{
"type": "website",
"target": "https://www.canva.com/integrations/slack/",
"uri": "https://www.canva.com/integrations/slack/",
"name": "Canva for Slack",
"ipAddress": ""
},
{
"type": "other",
"target": "Canva Desktop (macOS / Windows)",
"uri": "",
"name": "Canva Desktop (macOS / Windows)",
"ipAddress": ""
},
{
"type": "ios",
"target": "Canva (iOS)",
"uri": null,
"name": "Canva (iOS)",
"ipAddress": null
},
{
"type": "android",
"target": "Canva (Android)",
"uri": null,
"name": "Canva (Android)",
"ipAddress": null
},
{
"type": "other",
"target": "Canva (Chrome Extension)",
"uri": null,
"name": "Canva (Chrome Extension)",
"ipAddress": null
},
{
"type": "website",
"target": "*.canva.cn",
"uri": null,
"name": "*.canva.cn",
"ipAddress": null
},
{
"type": "website",
"target": "*.canva-apps.cn",
"uri": "",
"name": "*.canva-apps.cn",
"ipAddress": null
},
{
"type": "other",
"target": "Leaked Credentials and Secrets (Canva Employee/Contractor)",
"uri": "",
"name": "Leaked Credentials and Secrets (Canva Employee/Contractor)",
"ipAddress": ""
},
{
"type": "other",
"target": "Leaked Credentials and Secrets (Canva User)",
"uri": "",
"name": "Leaked Credentials and Secrets (Canva User)",
"ipAddress": ""
},
{
"type": "other",
"target": "3rd-Party Provider Vulnerability",
"uri": "",
"name": "3rd-Party Provider Vulnerability",
"ipAddress": ""
}
],
"out_of_scope": []
}
}Canva (Android)Canva (iOS)Apps SDK SandboxingCanva Desktop (macOS / Windows)Canva (Chrome Extension)Leaked Credentials and Secrets (Canva Employee/Contractor)Leaked Credentials and Secrets (Canva User)3rd-Party Provider Vulnerability— none listed —