- Top reward
- Not published
- Top severity paid
- Not published
- Assets in scope
- 0
- Public CVEs
- 0
- Last change
At a glance
What to know before you start testing.
- Pays cash
- Amounts are not published; ask before you invest time.
- Report on HackerOne
- Submit through the program page.
Rewards
What HackerOne lists as the payout for each severity.
HackerOne does not publish a reward table for this program.
Scope
0 assets you may test.
HackerOne does not list the scope of this program publicly. Check its policy.
Changes
Tracked since 12 Nov 2026. Last checked 4 minutes ago.
-
Paused
Paused. Not accepting reports right now.
Before we tracked it
Scope and reward changes recorded before this page started tracking it.
-
Status
Program status changed
-
Rules updated
Added: “Django’s development team is strongly committed to responsible reporting and disclosure of security-related issues.”
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.