BC Bugcrowd LIVE
Canva
up to$15,000
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
- safe harbor
- partial
18 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://api.canva.com | api | · | · | 2026-09-20 |
https://www.canva.com | domain | · | · | 2026-09-20 |
https://www.canva.com/developers/ | domain | · | · | 2026-09-20 |
https://www.canva.com/en_au/help/chatgpt-templates/ | domain | · | · | 2026-09-20 |
https://www.canva.com/integrations/slack/ | domain | · | · | 2026-09-20 |
Canva (Android) | mobile | · | · | 2026-09-20 |
Canva (iOS) | mobile | · | · | 2026-09-20 |
3rd-Party Provider Vulnerability | other | · | · | 2026-09-20 |
Apps SDK Sandboxing | other | · | · | 2026-09-20 |
Canva (Chrome Extension) | other | · | · | 2026-09-20 |
Canva Desktop (macOS / Windows) | other | · | · | 2026-09-20 |
Leaked Credentials and Secrets (Canva Employee/Contractor) | other | · | · | 2026-09-20 |
Leaked Credentials and Secrets (Canva User) | other | · | · | 2026-09-20 |
*.canva-apps.cn | wildcard | · | · | 2026-09-20 |
*.canva-apps.com | wildcard | · | · | 2026-09-20 |
*.canva.cn | wildcard | · | · | 2026-09-20 |
*.canva.com | wildcard | · | · | 2026-09-20 |
https://*.canva.tech | wildcard | · | · | 2026-09-20 |
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.