Not everyone who reports to Google Cloud VRP does a writeup, but critical bugs still show up in CVEs and release notes
Made a tool that aggregates both so you can see the types of bugs getting found in GCP
gcp-cves.brutecat.com
My 2nd RCE in Google Cloud production (Borg) in less than 3 months...
I'm at $600k in total rewards from Google VRP in the past few months. Still can't believe it.