JavaScript bounties

56 verified JavaScript bounties, drawn live from GitHub and certified by the bureau. Browse the full register →

• Automate Bug Detection and Reviews
  SecureBananaLabs/bug-bounty · $800 · Certified · JavaScript
• Low Handing Fruit Automation
  SecureBananaLabs/bug-bounty · $700 · Certified · JavaScript
• Pixel Art Creation with high Creative Thinking
  SecureBananaLabs/bug-bounty · $780 · Certified · JavaScript
• Technical Poem Generation and Content Creation
  SecureBananaLabs/bug-bounty · $430 · Certified · JavaScript
• Benchmark APIs with p50, p95, p99 latency, RPS, error rate and TTFB
  SecureBananaLabs/bug-bounty · $750 · Certified · JavaScript
• Implement a fully functional Admin Panel
  SecureBananaLabs/bug-bounty · $500 · Certified · JavaScript
• Implement Secure Payment Gateway and Payment Service
  SecureBananaLabs/bug-bounty · $350 · Certified · JavaScript
• upload endpoint accepts empty file submissions as successful uploads
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• auth refresh endpoint issues tokens without verifying the requester
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• registerUser access token can reference a different user id
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• CORS configured without origin allowlist in app.js (reissue via #743)
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• POST /api/users endpoint missing authentication middleware (reissue via #743)
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• POST /api/reviews endpoint missing authentication middleware (reissue via #743)
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• POST /api/proposals endpoint missing authentication middleware (reissue via #743)
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• User creation endpoint has no input validation
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Payment endpoint lacks authentication — unauthenticated payment creation
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Upload endpoint lacks authentication — unauthenticated file uploads allowed
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Admin routes lack role-based access control — any authenticated user can access admin endpoints
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Bug: user creation accepts empty payloads and client-controlled ids
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Bug: Missing admin role authorization check on admin metrics endpoint
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Bug: Multiple security vulnerabilities in API layer - registerUser() ID mismatch, missing auth, missing validation
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Bug: registerUser signs token with a different generated user id
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• fix(auth): prevent admin role self-assignment during registration
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Bug: Refresh endpoint mints tokens without validating a refresh token
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Registration token subject can drift from returned user id
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• fix: prevent admin role self-assignment during registration
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Bug: Proposal creation accepts records missing estimated duration
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• fix: prevent admin role self-assignment
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• Bug: Rate limiter should count malformed JSON before body parsing
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• fix: prevent admin role self-assignment
  SecureBananaLabs/bug-bounty · unspecified sum · Under review · JavaScript
• [FEATURE] : Adding Super Admin Dashboard & Its Functionalities
  vedanshjainvj/Job-Hive · unspecified sum · Under review · JavaScript
• Disallow repeated notifications (shake to indicate retrigger)
  Paratii-Video/paratii-portal · unspecified sum · Under review · JavaScript
• File size restriction messaging
  Paratii-Video/paratii-portal · unspecified sum · Under review · JavaScript
• 📺 Implement chromecast support
  Paratii-Video/paratii-mediaplayer · unspecified sum · Under review · JavaScript
• Feature: add private key data safely in iCloud
  matter-labs-archive/FranklinPay-iOS · unspecified sum · Under review · JavaScript
• Feature: cancel Franklin cheques
  matter-labs-archive/FranklinPay-iOS · unspecified sum · Under review · JavaScript
• Implement ETH notifications in txq.cyb
  cybercongress/cyb-archeology · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-03T11:38
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-03T10:02
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-03T07:38
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-03T03:47
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-02T23:07
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-02T22:07
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-02T21:06
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-02T19:23
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-02T17:11
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• ⚖️ [Core] Escrow 2-di-3 per lavori robot (Cliente + Robot + AI Arbitro)
  MyZubster-Ecosystem/MyZubster-Robot · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-02T15:12
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-02T13:47
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [radar] SN open bounty 2026-08-01T08:31
  relayhop/sn-monetization-runtime · unspecified sum · Under review · JavaScript
• [Bounty] Escrow gateway to coordinate orders and signatures
  MyZubster-Ecosystem/MyZubsterGateway · unspecified sum · Under review · JavaScript
• [ENHANCEMENT] : UI Change
  vedanshjainvj/Job-Hive · unspecified sum · Under review · JavaScript
• use a single global ipfs instance when you have different players on the same page
  Paratii-Video/paratii-portal · unspecified sum · Under review · JavaScript
• Feature: Pending transactions
  matter-labs-archive/FranklinPay-iOS · unspecified sum · Under review · JavaScript
• [Bounty] Seed Exchange: add CSV/GeoJSON export endpoints
  MyZubster-Ecosystem/MyZubsterGateway · unspecified sum · Under review · JavaScript
• Support ERC-721 Tokens
  matter-labs-archive/FranklinPay-iOS · token reward · Under review · JavaScript