Triaging Stripe's Bug Bounty Reports, Part 1: An Archived-Price Logic Flaw

The first in a series where I work through publicly disclosed reports from Stripe's HackerOne program the way a triage analyst would validate, assess impact, assign severity, and decide what happens n