How I Found a HIGH-Severity AI Security Issue on Khan Academy's VDP - DEV Community
My first HackerOne report landed as a HIGH-severity information disclosure on Khan Academy. The methodology, the exact attack vector, and 7 other findings I bundled in.