sorona.xyz bug bounty programs

sorona.xyz programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
LI libjxl Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• LI

  libjxl

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://jpegxl.info

  Web

• [email protected] is the project's security channel and the object it covers is the libjxl tree; Brotli is a separate project and sits outside. Nothing narrower than the codec is carved out, and everything below is inside it

  Products and areas

• Frame-header, table-of-contents and section parsing, and the multi-frame and animation paths those drive

  Products and areas

• Integer arithmetic on image dimensions, group sizes and upsampling factors, where a declared size is turned into an allocation before anything validates it

  Products and areas

• The JPEG recompression path, which reconstructs an original JPEG bit-exactly and is the most intricate single piece of logic in the codec

  Products and areas

• The JPEG XL bitstream decoder in both of its modes, modular and VarDCT, together with the entropy-coding layer underneath them

  Products and areas

• The libjxl and libjxl_threads API boundary in full, since that is how ImageMagick, libvips, GIMP and the OS image pipelines actually reach the decoder

  Products and areas

• The multithreaded decode paths, where work is split across groups and the synchronisation between them is itself attacker-influenced

  Products and areas

No target matches. Try part of a host name, such as the company name.