Program Removed

This program is no longer available on Bugcrowd. The scope data shown below is historical and may not reflect the final state of the program.

canva

BugcrowdView on Bugcrowd

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (36)

Asset	Category	Bounty	Quick Links
*.canva-apps.cn	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.canva-apps.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.canva.cn	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.canva.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.canva.tech	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
3rd-party provider vulnerability	OTHER	Yes	-
3rd-party provider vulnerability	OTHER	Yes	-
apps sdk sandboxing	OTHER	Yes	-
apps sdk sandboxing	OTHER	Yes	-
canva (android)	ANDROID	Yes	-
canva (android)	ANDROID	Yes	-
canva (chrome extension)	OTHER	Yes	-
canva (chrome extension)	OTHER	Yes	-
canva (ios)	IOS	Yes	-
canva (ios)	IOS	Yes	-
canva desktop (macos / windows)	OTHER	Yes	-
canva desktop (macos / windows)	OTHER	Yes	-
canva-apps.cn	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
canva-apps.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
canva.cn	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
canva.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
canva.tech	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://api.canva.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://api.canva.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.canva.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.canva.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.canva.com/developers	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.canva.com/developers	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.canva.com/en_au/help/chatgpt-templates	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.canva.com/en_au/help/chatgpt-templates	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.canva.com/integrations/slack	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.canva.com/integrations/slack	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
leaked credentials and secrets (canva employee/contractor)	OTHER	Yes	-
leaked credentials and secrets (canva employee/contractor)	OTHER	Yes	-
leaked credentials and secrets (canva user)	OTHER	Yes	-
leaked credentials and secrets (canva user)	OTHER	Yes	-

Scope Changes (277)

Jun 26, 2026

Change	Asset	Category	Scope	Time
Program Removed	—	—	—	06:34

Jun 25, 2026

Change	Asset	Category	Scope	Time
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	02:31
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	02:31
Added	*.canva-apps.cn	URL	In Scope	02:31
Added	*.canva.cn	URL	In Scope	02:31
Added	canva (chrome extension)	OTHER	In Scope	02:31
Added	canva (android)	ANDROID	In Scope	02:31
Added	canva (ios)	IOS	In Scope	02:31
Added	canva desktop (macos / windows)	OTHER	In Scope	02:31
Added	https://www.canva.com/integrations/slack	URL	In Scope	02:31
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	02:31
Added	*.canva.tech	URL	In Scope	02:31
Added	*.canva-apps.com	URL	In Scope	02:31
Added	*.canva.com	URL	In Scope	02:31
Added	https://api.canva.com	URL	In Scope	02:31
Added	apps sdk sandboxing	OTHER	In Scope	02:31
Added	3rd-party provider vulnerability	OTHER	In Scope	02:31
Added	https://www.canva.com/developers	URL	In Scope	02:31
Added	https://www.canva.com	URL	In Scope	02:31
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	02:31
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	02:31
Added	*.canva.com	WILDCARD	In Scope	02:31
Added	https://www.canva.com	URL	In Scope	02:31
Added	*.canva-apps.cn	WILDCARD	In Scope	02:31
Added	*.canva.cn	WILDCARD	In Scope	02:31
Added	apps sdk sandboxing	OTHER	In Scope	02:31
Added	https://www.canva.com/developers	URL	In Scope	02:31
Added	canva (ios)	IOS	In Scope	02:31
Added	canva desktop (macos / windows)	OTHER	In Scope	02:31
Added	https://www.canva.com/integrations/slack	URL	In Scope	02:31
Added	*.canva.tech	WILDCARD	In Scope	02:31
Added	*.canva-apps.com	WILDCARD	In Scope	02:31
Added	https://api.canva.com	URL	In Scope	02:31
Added	canva (chrome extension)	OTHER	In Scope	02:31
Added	canva (android)	ANDROID	In Scope	02:31
Added	3rd-party provider vulnerability	OTHER	In Scope	02:31
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	02:31
Program Removed	—	—	—	01:41

Jun 24, 2026

Change	Asset	Category	Scope	Time
Added	*.canva-apps.com	URL	In Scope	23:31
Added	canva (android)	ANDROID	In Scope	23:31
Added	canva (ios)	IOS	In Scope	23:31
Added	*.canva.tech	WILDCARD	In Scope	23:31
Added	https://www.canva.com/developers	URL	In Scope	23:31
Added	3rd-party provider vulnerability	OTHER	In Scope	23:31
Added	canva desktop (macos / windows)	OTHER	In Scope	23:31
Added	https://www.canva.com/integrations/slack	URL	In Scope	23:31
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	23:31
Added	canva (chrome extension)	OTHER	In Scope	23:31
Added	*.canva-apps.com	WILDCARD	In Scope	23:31
Added	https://api.canva.com	URL	In Scope	23:31
Added	https://www.canva.com	URL	In Scope	23:31
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	23:31
Added	*.canva.cn	WILDCARD	In Scope	23:31
Added	*.canva.com	WILDCARD	In Scope	23:31
Added	apps sdk sandboxing	OTHER	In Scope	23:31
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	23:31
Added	*.canva-apps.cn	WILDCARD	In Scope	23:31
Added	3rd-party provider vulnerability	OTHER	In Scope	23:31
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	23:31
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	23:31
Added	*.canva-apps.cn	URL	In Scope	23:31
Added	*.canva.cn	URL	In Scope	23:31
Added	canva (chrome extension)	OTHER	In Scope	23:31
Added	canva (android)	ANDROID	In Scope	23:31
Added	canva (ios)	IOS	In Scope	23:31
Added	canva desktop (macos / windows)	OTHER	In Scope	23:31
Added	https://www.canva.com/integrations/slack	URL	In Scope	23:31
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	23:31
Added	*.canva.com	URL	In Scope	23:31
Added	https://api.canva.com	URL	In Scope	23:31
Added	apps sdk sandboxing	OTHER	In Scope	23:31
Added	https://www.canva.com/developers	URL	In Scope	23:31
Added	https://www.canva.com	URL	In Scope	23:31
Added	*.canva.tech	URL	In Scope	23:31
Program Removed	—	—	—	22:41
Added	*.canva-apps.com	WILDCARD	In Scope	20:31
Added	https://www.canva.com	URL	In Scope	20:31
Added	https://www.canva.com/developers	URL	In Scope	20:31
Added	apps sdk sandboxing	OTHER	In Scope	20:31
Added	https://api.canva.com	URL	In Scope	20:31
Added	*.canva.com	URL	In Scope	20:31
Added	*.canva-apps.com	URL	In Scope	20:31
Added	*.canva.tech	URL	In Scope	20:31
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	20:31
Added	https://www.canva.com/integrations/slack	URL	In Scope	20:31
Added	canva desktop (macos / windows)	OTHER	In Scope	20:31
Added	canva (ios)	IOS	In Scope	20:31
Added	canva (android)	ANDROID	In Scope	20:31
Added	canva (chrome extension)	OTHER	In Scope	20:31
Added	*.canva.cn	URL	In Scope	20:31
Added	*.canva-apps.cn	URL	In Scope	20:31
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	20:31
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	20:31
Added	3rd-party provider vulnerability	OTHER	In Scope	20:31
Added	*.canva.tech	WILDCARD	In Scope	20:31
Added	https://www.canva.com/integrations/slack	URL	In Scope	20:31
Added	canva (chrome extension)	OTHER	In Scope	20:31
Added	*.canva-apps.cn	WILDCARD	In Scope	20:31
Added	3rd-party provider vulnerability	OTHER	In Scope	20:31
Added	apps sdk sandboxing	OTHER	In Scope	20:31
Added	*.canva.com	WILDCARD	In Scope	20:31
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	20:31
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	20:31
Added	https://www.canva.com/developers	URL	In Scope	20:31
Added	https://api.canva.com	URL	In Scope	20:31
Added	canva (android)	ANDROID	In Scope	20:31
Added	*.canva.cn	WILDCARD	In Scope	20:31
Added	https://www.canva.com	URL	In Scope	20:31
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	20:31
Added	canva desktop (macos / windows)	OTHER	In Scope	20:31
Added	canva (ios)	IOS	In Scope	20:31
Program Removed	—	—	—	19:41

Jun 17, 2026

Change	Asset	Category	Scope	Time
Added	canva (android)	ANDROID	In Scope	11:32
Added	https://www.canva.com	URL	In Scope	11:32
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	11:32
Added	3rd-party provider vulnerability	OTHER	In Scope	11:32
Added	canva desktop (macos / windows)	OTHER	In Scope	11:32
Added	https://www.canva.com/integrations/slack	URL	In Scope	11:32
Added	*.canva-apps.com	WILDCARD	In Scope	11:32
Added	https://api.canva.com	URL	In Scope	11:32
Added	apps sdk sandboxing	OTHER	In Scope	11:32
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	11:32
Added	canva (chrome extension)	OTHER	In Scope	11:32
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	11:32
Added	https://www.canva.com/developers	URL	In Scope	11:32
Added	*.canva-apps.cn	WILDCARD	In Scope	11:32
Added	*.canva.cn	WILDCARD	In Scope	11:32
Added	3rd-party provider vulnerability	OTHER	In Scope	11:32
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	11:32
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	11:32
Added	canva (ios)	IOS	In Scope	11:32
Added	*.canva.com	WILDCARD	In Scope	11:32
Added	*.canva.tech	WILDCARD	In Scope	11:32
Added	https://www.canva.com	URL	In Scope	11:32
Added	https://www.canva.com/developers	URL	In Scope	11:32
Added	apps sdk sandboxing	OTHER	In Scope	11:32
Added	https://api.canva.com	URL	In Scope	11:32
Added	*.canva.com	URL	In Scope	11:32
Added	*.canva-apps.com	URL	In Scope	11:32
Added	*.canva.tech	URL	In Scope	11:32
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	11:32
Added	https://www.canva.com/integrations/slack	URL	In Scope	11:32
Added	canva desktop (macos / windows)	OTHER	In Scope	11:32
Added	canva (ios)	IOS	In Scope	11:32
Added	canva (android)	ANDROID	In Scope	11:32
Added	canva (chrome extension)	OTHER	In Scope	11:32
Added	*.canva.cn	URL	In Scope	11:32
Added	*.canva-apps.cn	URL	In Scope	11:32
Program Removed	—	—	—	10:34

Mar 20, 2026

Change	Asset	Category	Scope	Time
Added	*.canva.cn	WILDCARD	In Scope	06:43
Added	apps sdk sandboxing	OTHER	In Scope	06:43
Added	https://www.canva.com	URL	In Scope	06:43
Added	https://www.canva.com/developers	URL	In Scope	06:43
Added	apps sdk sandboxing	OTHER	In Scope	06:43
Added	https://api.canva.com	URL	In Scope	06:43
Added	*.canva.com	URL	In Scope	06:43
Added	*.canva-apps.com	URL	In Scope	06:43
Added	*.canva.tech	URL	In Scope	06:43
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	06:43
Added	https://www.canva.com/integrations/slack	URL	In Scope	06:43
Added	canva desktop (macos / windows)	OTHER	In Scope	06:43
Added	canva (ios)	IOS	In Scope	06:43
Added	canva (android)	ANDROID	In Scope	06:43
Added	canva (chrome extension)	OTHER	In Scope	06:43
Added	*.canva.cn	URL	In Scope	06:43
Added	*.canva-apps.cn	URL	In Scope	06:43
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	06:43
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	06:43
Added	3rd-party provider vulnerability	OTHER	In Scope	06:43
Added	*.canva.com	WILDCARD	In Scope	06:43
Added	canva desktop (macos / windows)	OTHER	In Scope	06:43
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	06:43
Added	https://www.canva.com	URL	In Scope	06:43
Added	https://api.canva.com	URL	In Scope	06:43
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	06:43
Added	canva (ios)	IOS	In Scope	06:43
Added	canva (android)	ANDROID	In Scope	06:43
Added	*.canva-apps.com	WILDCARD	In Scope	06:43
Added	*.canva.tech	WILDCARD	In Scope	06:43
Added	https://www.canva.com/integrations/slack	URL	In Scope	06:43
Added	canva (chrome extension)	OTHER	In Scope	06:43
Added	*.canva-apps.cn	WILDCARD	In Scope	06:43
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	06:43
Added	3rd-party provider vulnerability	OTHER	In Scope	06:43
Added	https://www.canva.com/developers	URL	In Scope	06:43
Program Removed	—	—	—	04:54

Mar 5, 2026

Change	Asset	Category	Scope	Time
Added	https://www.canva.com	URL	In Scope	22:27
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	22:27
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	22:27
Added	canva (ios)	IOS	In Scope	22:27
Added	canva (chrome extension)	OTHER	In Scope	22:27
Added	canva (android)	ANDROID	In Scope	22:27
Added	https://www.canva.com/integrations/slack	URL	In Scope	22:27
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	22:27
Added	*.canva.tech	WILDCARD	In Scope	22:27
Added	*.canva-apps.com	WILDCARD	In Scope	22:27
Added	https://www.canva.com/developers	URL	In Scope	22:27
Added	https://www.canva.com	URL	In Scope	22:27
Added	*.canva-apps.cn	WILDCARD	In Scope	22:27
Added	*.canva.cn	WILDCARD	In Scope	22:27
Added	canva desktop (macos / windows)	OTHER	In Scope	22:27
Added	*.canva.com	WILDCARD	In Scope	22:27
Added	https://api.canva.com	URL	In Scope	22:27
Added	3rd-party provider vulnerability	OTHER	In Scope	22:27
Added	apps sdk sandboxing	OTHER	In Scope	22:27
Added	3rd-party provider vulnerability	OTHER	In Scope	22:27
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	22:27
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	22:27
Added	*.canva-apps.cn	URL	In Scope	22:27
Added	*.canva.cn	URL	In Scope	22:27
Added	canva (chrome extension)	OTHER	In Scope	22:27
Added	canva (ios)	IOS	In Scope	22:27
Added	canva desktop (macos / windows)	OTHER	In Scope	22:27
Added	https://www.canva.com/integrations/slack	URL	In Scope	22:27
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	22:27
Added	*.canva.tech	URL	In Scope	22:27
Added	canva (android)	ANDROID	In Scope	22:27
Added	*.canva-apps.com	URL	In Scope	22:27
Added	*.canva.com	URL	In Scope	22:27
Added	https://api.canva.com	URL	In Scope	22:27
Added	https://www.canva.com/developers	URL	In Scope	22:27
Added	apps sdk sandboxing	OTHER	In Scope	22:27

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	*.canva.tech	WILDCARD	In Scope	19:14
Added	*.canva-apps.com	WILDCARD	In Scope	19:14
Added	https://www.canva.com/developers	URL	In Scope	19:14
Added	https://www.canva.com	URL	In Scope	19:14
Added	apps sdk sandboxing	OTHER	In Scope	19:14
Added	*.canva.cn	WILDCARD	In Scope	19:14
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	19:14
Added	canva (chrome extension)	OTHER	In Scope	19:14
Added	canva (android)	ANDROID	In Scope	19:14
Added	canva (ios)	IOS	In Scope	19:14
Added	https://www.canva.com/integrations/slack	URL	In Scope	19:14
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	19:14
Added	*.canva.com	WILDCARD	In Scope	19:14
Added	3rd-party provider vulnerability	OTHER	In Scope	19:14
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	19:14
Added	*.canva-apps.cn	WILDCARD	In Scope	19:14
Added	canva desktop (macos / windows)	OTHER	In Scope	19:14
Added	https://api.canva.com	URL	In Scope	19:14
Program Removed	—	—	—	17:22
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	17:14
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	17:14
Added	*.canva-apps.cn	URL	In Scope	17:14
Added	*.canva.cn	URL	In Scope	17:14
Added	canva (chrome extension)	OTHER	In Scope	17:14
Added	canva (android)	ANDROID	In Scope	17:14
Added	canva (ios)	IOS	In Scope	17:14
Added	canva desktop (macos / windows)	OTHER	In Scope	17:14
Added	https://www.canva.com/integrations/slack	URL	In Scope	17:14
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	17:14
Added	*.canva.tech	URL	In Scope	17:14
Added	*.canva-apps.com	URL	In Scope	17:14
Added	*.canva.com	URL	In Scope	17:14
Added	https://api.canva.com	URL	In Scope	17:14
Added	apps sdk sandboxing	OTHER	In Scope	17:14
Added	https://www.canva.com	URL	In Scope	17:14
Added	https://www.canva.com/developers	URL	In Scope	17:14
Added	canva (chrome extension)	OTHER	In Scope	17:14
Added	*.canva-apps.com	WILDCARD	In Scope	17:14
Added	apps sdk sandboxing	OTHER	In Scope	17:14
Added	*.canva.cn	WILDCARD	In Scope	17:14
Added	canva desktop (macos / windows)	OTHER	In Scope	17:14
Added	https://www.canva.com/en_au/help/chatgpt-templates	URL	In Scope	17:14
Added	https://www.canva.com/developers	URL	In Scope	17:14
Added	https://www.canva.com	URL	In Scope	17:14
Added	canva (android)	ANDROID	In Scope	17:14
Added	https://www.canva.com/integrations/slack	URL	In Scope	17:14
Added	*.canva.com	WILDCARD	In Scope	17:14
Added	https://api.canva.com	URL	In Scope	17:14
Added	3rd-party provider vulnerability	OTHER	In Scope	17:14
Added	leaked credentials and secrets (canva user)	OTHER	In Scope	17:14
Added	leaked credentials and secrets (canva employee/contractor)	OTHER	In Scope	17:14
Added	*.canva-apps.cn	WILDCARD	In Scope	17:14
Added	canva (ios)	IOS	In Scope	17:14
Added	*.canva.tech	WILDCARD	In Scope	17:14
Added	3rd-party provider vulnerability	OTHER	In Scope	17:14