Julia bug bounty programs

Julia programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
JU Julia Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• JU

  Julia

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://julialang.org

  Web

• Base itself: string handling, array indexing, arithmetic and the unsafe_ family that deliberately leaves the checked subset

  Products and areas

• Distributed and the cluster machinery, which moves serialised work between processes and hosts

  Products and areas

• Pkg, the package manager, and everything it does with a registry: resolution, download, artifact verification and precompilation

  Products and areas

• Serialisation and deserialisation across the standard library, covering Serialization, the package precompilation cache and any format that reconstructs objects from bytes

  Products and areas

• The binary artifacts and JLL packages the distribution pulls in, and the verification applied to them

  Products and areas

• The ccall and foreign-function boundary, where the safety guarantees stop

  Products and areas

• The JIT and the LLVM lowering path, where a miscompilation can drop a bounds check the language guarantees

  Products and areas

• The published security policy asks for vulnerabilities by email to the project's security address and states that the LTS and current stable releases receive security updates. It declares no component boundary, so the Julia distribution as shipped is the target

  Products and areas

• The REPL and the code-loading path behind include, using and import

  Products and areas

• The runtime written in C and C++, including the garbage collector, the task scheduler and the threading implementation

  Products and areas

• The standard library networking and cryptography modules and the C libraries they bind to

  Products and areas

No target matches. Try part of a host name, such as the company name.