Public jsDelivr bug reports.

Team Bounty Title
jsDelivr - Pretty Photo Dom XSS
jsDelivr - HSTS Policy not enabled on cdn.jsdelivr.net
jsDelivr - Using nmap revealing sensitive information
jsDelivr - XSS
jsDelivr - Directory Traversal at http://staging.jsdelivr.net/