Basecamp has recently disclosed a critical vulnerability that could allow remote code execution attacks. Fortunately, Basecamp has already deployed a fix and the bug no more exists. Critical Basecamp RCE

After years of running private vulnerability disclosure, Basecamp has now launched their bug bounty program to the public. All bug bounty hunters can participate in this program via HackerOne. Basecamp