Security Policy

Reporting a Vulnerability

If there are any vulnerability in blablacar/action-c-3po-droid project, don't hesitate to report them.

If the vulnerability is in the scope of our Bug Bounty program, please report it there: https://yeswehack.com/programs/bug-bounty-program-blablacar
If not, please send and email to [email protected] describing the vulnerabilty and the attack, with an explanation on how to reproduce exploitation.
Please report your findings in English

If you have a fix, explain or attach it. In the near time, expect a reply with the required steps.

Public disclosure

If you'd like to publish any information about a bug or vulnerability please coordinate with us first.