Bounty Calculator 🤖

Paste any GitHub URL to discover how much you can earn and if your report will be eligible for a CVE.
Whilst most maintainers respond to reports, we cannot guarantee this unless the project is boosted 🚀

Boosted Projects 🚀

These projects are guaranteed to get reviewed and have boosted rewards for critical, high, medium and low severity reports.
The bounties and projects change often so you'll want to bookmark this page.

This section is in beta, tell us what you think.

Recently added (1)

outline
NEW
$2000
added 6d ago

Java (58)

spring-framework
$1200
junit4
$1190
slf4j
$1180
guava
$1150
okhttp
$1145
kotlin
$1135
netty
$1130
fastjson
$1105
gson
$1100
logback
$1090
httpcomponents-client
$1070
org.aspectj
$1065
HikariCP
$1065
JavaHamcrest
$1045
lombok
$1045
antlr4
$1040
commons-codec
$1030
jackson-core
$1030
neo4j
$1025
junit5
$1010
assertj-core
$995
JsonPath
$990
beanvalidation-api
$980
j2objc
$975
error-prone
$970
jetty.project
$950
reactive-streams-jvm
$945
httpcomponents-core
$945
logging-log4j2
$930
commons-lang
$920
antlr3
$885
HdrHistogram
$880
commons-io
$850
objenesis
$850
checker-framework
$835
java-annotations
$835
JSONassert
$830
commons-collections
$825
findbugs
$820
hibernate-commons-annotations
$815
commons-math
$815
LatencyUtils
$785
commons-compress
$780
json-smart-v2
$780
commons-beanutils
$775
java-classmate
$765
opentest4j
$760
commons-logging
$755
common-annotations-api
$735
apiguardian
$730
jpa-api
$730
jaxb-api
$705
jaf
$700
transactions
$695
json-smart-v1
$675
snakeyaml
$675
xerces-xml-commons
$615
java-concurrency-in-practice
$615

JavaScript (22)

drawio
$2000
drawio-desktop
$2000
body-parser
$1200
yargs
$1200
express
$1200
iconv-lite
$1200
qs
$1200
grunt
$1190
url-parse
$1175
lodash
$1150
browserify
$1145
underscore
$1105
logback
$1090
mocha
$1085
guzzle
$1085
winston
$1070
lombok
$1045
whoops
$1030
parse-url
$915
logging-log4net
$825
silverstripe-cms
$820
chatwoot
$435

C# (8)

Newtonsoft.Json
$1145
Dapper
$1060
antlr4
$1040
NLog
$975
serilog
$960
elasticsearch-net
$940
Core
$910
logging-log4net
$825

PHP (14)

monolog
$1120
yaml
$1095
guzzle
$1085
Twig
$1050
whoops
$1030
Slim
$1030
cakephp
$1025
predis
$985
php-coveralls
$970
Pimple
$950
silverstripe-framework
$855
core
$825
silverstripe-cms
$820
core-bundle
$815

Python (14)

jinja
$1095
pyyaml
$1065
click
$1065
antlr4
$1040
loguru
$1020
lxml
$1015
paramiko
$1000
pyparsing
$995
pre-commit
$990
simplejson
$960
GitPython
$930
client
$930
antlr3
$885
configparser
$875

Go (15)

cli
$1065
mux
$1055
zap
$1050
gjson
$1010
zerolog
$970
go-restful
$950
go-grpc-middleware
$945
glog
$935
yaml
$935
easyjson
$930
go-git
$920
cors
$880
multierr
$855
logr
$840
nakama
$810

Apps (7)

drawio
$2000
drawio-desktop
$2000
client
$930
core
$825
silverstripe-cms
$820
core-bundle
$815
nakama
$810

Apache (12)

httpcomponents-client
$1070
commons-codec
$1030
httpcomponents-core
$945
logging-log4j2
$930
commons-lang
$920
commons-io
$850
logging-log4net
$825
commons-collections
$825
commons-math
$815
commons-compress
$780
commons-beanutils
$775
commons-logging
$755