Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

TDengine bug bounty programs

tdengine.com Updated

TDengine runs one public program: a Sorona bug bounty paying up to $1,500.

Top reward
$1,500
Sorona
Programs
1
1 pays cash
Targets in scope
13
2 types
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program TDengine runs.

  • TDengine

    Sorona · Bug bounty

    Open

    Top reward

    $1,500
    Critical
    –
    High
    –
    Medium
    –
    Low
    $100
    Safe harbor
    Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

13 targets. 6 excluded.

  • https://tdengine.com

    Web

  • On-disk storage files, metadata and the write-ahead log, including what happens when the server opens data it did not write

    Products and areas

  • Stream processing, continuous queries and the data subscription surface

    Products and areas

  • The CLI and the administrative and monitoring components shipped alongside the server

    Products and areas

  • The cluster layer: node membership, replication, leader election and the RPC that nodes trust from one another

    Products and areas

  • The database server process end to end, including the query engine and every operator it runs

    Products and areas

  • The HTTP and REST interface that fronts the server, covering every route it exposes

    Products and areas

  • The native client library and every language connector built on top of it, along with the wire protocol between them and the server

    Products and areas

  • The published policy is one line asking for submissions through the repository's advisory page. It draws no boundary at all, so the whole TDengine tree is in scope

    Products and areas

  • The SQL layer: parsing, planning, function evaluation and the built-in functions a query can reach

    Products and areas

  • The write path in full: schemaless ingest, the compatibility endpoints for other databases' line protocols and the parsers behind each of them

    Products and areas

  • User-defined function loading and execution

    Products and areas

  • Users, privileges and database-level permissions, including how a permission decision is cached

    Products and areas

No target matches. Try part of a host name, such as the company name.

Out of scope 6

Don't test these. A program can exclude a host another program covers; the program you report to decides.

  • A server deliberately exposed to an untrusted network with default credentials in place, which is a deployment decision

  • Findings already covered by one of the project's published advisories

  • Resource exhaustion from a query or an ingest rate the operator sized the machine for

  • The commercial enterprise and cloud editions, where a finding cannot be reproduced against the open source server

  • Third-party connectors and integrations maintained outside the project

  • Upstream dependency vulnerabilities, unless TDengine's own use of the dependency makes them reachable

Recent changes

Reward and scope changes across every TDengine program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

Recent CVEs

Published vulnerabilities in TDengine products, from the NVD.

Search NVD
  • CVE-2026-42542 High

    TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.

  • CVE-2023-38502 Medium

    TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query. This issue affects TDengine Databases which let users connect and run arbitrary queries. Version 3.0.7.1 has a patch for this issue.

  • CVE-2023-34111 High

    The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of `${{ github.event.pull_request.title }}` in a bash command within the GitHub workflow. Attackers can inject malicious commands which will be executed by the workflow. This h

About this page

This page gathers every public program listed under tdengine.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.