If there are any vulnerability in blablacar/action-c-3po-droid project, don't hesitate to report them.
- If the vulnerability is in the scope of our Bug Bounty program, please report it there: https://yeswehack.com/programs/bug-bounty-program-blablacar
- If not, please send and email to security@blablacar.com describing the vulnerabilty and the attack, with an explanation on how to reproduce exploitation.
- Please report your findings in English
If you have a fix, explain or attach it. In the near time, expect a reply with the required steps.
If you'd like to publish any information about a bug or vulnerability please coordinate with us first.