GraphQL discloses internal beer consumption

hackerone.com

1 pointisp1 comment

"Summary: With great pleasure we would like to report that we have discovered a GraphQL endpoint that discloses internal beer consumption at your [Spotify] offices."

Shopify awarded a $134 bounty for this.

Reply on news.ycombinator.com