Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

SerenityOS bug bounty programs

serenityos.org Updated

SerenityOS runs one public program: a self-hosted bug bounty paying up to $50.

Top reward
$50
Self-hosted
Programs
1
1 pays cash
Targets in scope
3
1 type
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program SerenityOS runs.

  • SerenityOS

    Self-hosted · Bug bounty

    Open

    Top reward

    $50
    Safe harbor
    None

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

3 targets.

  • Arbitrary code execution in the Browser when loading a remote web page

    Products and areas

  • Local privilege escalation

    Products and areas

  • Remote code execution

    Products and areas

No target matches. Try part of a host name, such as the company name.

Recent changes

Reward and scope changes across every SerenityOS program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

Recent CVEs

Published vulnerabilities in SerenityOS products, from the NVD.

Search NVD
  • CVE-2021-4327 Medium

    A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initialize_typed_array_from_array_buffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore,

  • CVE-2021-31272 Critical

    SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation.

  • CVE-2021-33185 High

    SerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow attackers to obtain sensitive information.

  • CVE-2021-33186 High

    SerenityOS in test-crypto.cpp contains a stack buffer overflow which could allow attackers to obtain sensitive information.

  • CVE-2021-30045 Critical

    SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function.

  • CVE-2021-27343 High

    SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent). The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::der_decode_sequence() function. The attack vector is: Parsing RSA Key ASN.1.

  • CVE-2021-28874 High

    SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file.

  • CVE-2019-20172 High

    Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack.

About this page

This page gathers every public program listed under serenityos.org: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.