Where to report
The one public program sorona.xyz runs.
| Program | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|
JAX and OpenXLA
Sorona · Bug bounty |
$3,100 | Partial | – | – | Open |
-
- Safe harbor
- Partial
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
9 targets. 9 excluded.
-
https://docs.jax.dev
Web
-
Google's open-source VRP takes security issues in the latest versions of the code held in the repositories it lists, and it names both jax-ml/jax and openxla/xla at TIER_OT1: a product vulnerability anywhere in either repository is accepted, at $101 to $3,133.70
Products and areas
-
JAX's public array surface and the tracing layer beneath it: jax.numpy, jax.lax, jax.scipy, random number generation, and the shape and dtype inference that runs behind all of them
Products and areas
-
Pallas kernels, the foreign-function interface and custom-call registration, plus jaxlib, the native extension carrying them down into XLA
Products and areas
-
Serialisation and export: jax.export and jax.experimental.serialize, the StableHLO artifacts they emit, and the loader that turns one back into an executable computation
Products and areas
-
The distributed coordination service that multi-host jobs speak between cluster nodes, and the repository and release pipelines behind the published wheels, which Google prices under its separate supply-chain category
Products and areas
-
The PJRT runtime and its plugin interface: device memory management, buffer donation, executable caching, and the collectives used across devices
Products and areas
-
The transformations and the jaxpr representation they build and consume: jit, grad, vmap, pmap and shard_map, together with sharding and device placement
Products and areas
-
XLA's front end: HLO and StableHLO text and proto parsing, the whole optimisation and layout pass pipeline, and code generation for the CPU, GPU and TPU backends
Products and areas
No target matches. Try part of a host name, such as the company name.
Out of scope 9
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
Any other repository in the jax-ml, openxla or Google orgs that the tier file does not list, which pays nothing for a product vulnerability after the April 2026 rules update
-
Compiling or executing code the caller already controls, since that sits inside the trust boundary the framework assumes
-
Defects that only reproduce on a release the projects no longer ship, since the program covers the latest versions
-
GPU vendor driver and CUDA bugs that merely surface through XLA and belong to the hardware vendor
-
Memory-corruption reports in XLA submitted without exact OSS-Fuzz reproduction steps against an existing fuzz target, or a merged upstream patch
-
Model-behaviour and ML-safety research, which the program routes to the Google AI VRP rather than the OSS VRP
-
Numerical accuracy differences with no security consequence, which are correctness bugs rather than vulnerabilities
-
Reports filed by anyone other than the finder: Google wants the submission through bughunters.google.com under the researcher's own identity, and it does not pay Google or Google Partner employees
-
Rewards to researchers on a sanctions list, in a sanctioned territory, or located in Russia or Belarus, which Google states it cannot issue
Recent changes
Reward and scope changes across every sorona.xyz program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
About this page
This page gathers every public program listed under jax.dev: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.