Owner

MozillaSecurity

14 indexed repositories · View on GitHub

grizzly
A cross-platform browser fuzzing framework

Python · 322 stars
FuzzManager
A fuzzing management tools collection

Python · 208 stars
orion
CI/CD pipeline for building and publishing multiple 🐳 containers as microservices within a mono repository.

Python · 49 stars
fuzzfetch
Downloader for Firefox/jsshell/Thunderbird builds for fuzzing.

Python · 48 stars
ffpuppet
A Python module that enables the automation of Firefox

Python · 33 stars
cryptofuzz
Fuzzing cryptographic libraries. Magic bug printer go brrrr.

C++ · 29 stars
prefpicker
Manage & generate prefs.js files

Python · 12 stars
bugmon
Automatic analysis of SpiderMonkey and Firefox bugs on Bugzilla

Python · 11 stars
nss-fuzzing-corpus
Corpora used to seed NSS' fuzzing targets

11 stars
autobisect
Automatic Bisection Firefox and SpiderMonkey Bugs

Python · 8 stars
fx-audit-mcp

Python · 4 stars
attackanddefense.dev
attackanddefense.dev blog

Ruby · 2 stars
bugmon-tc
Tools for running Bugmon in TaskCluster

Python · 1 star
WebCompatManager
A WebCompat management tools collection

Python · 1 star

Beginner friendly Everything

Open All

[prefmonitor] - Template pref "media.webspeech.recognition.enable" can be removed Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

MozillaSecurity/prefpicker#202 · Opened Sep 7, 2026
_get_build_dir reports every mach environment failure as a JSON parse error Open

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

MozillaSecurity/fx-audit-mcp#30 · Opened Sep 2, 2026
nss_gtest_evaluator runs both gtest suites and full all.sh setup to reach one test Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

MozillaSecurity/fx-audit-mcp#29 · Opened Sep 2, 2026
Should evaluator timeouts be reported as a result instead of raising TimeoutError? Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

MozillaSecurity/fx-audit-mcp#26 · Opened Aug 26, 2026
Avoid suppressing early failures Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

MozillaSecurity/fx-audit-mcp#20 · 1 comment · Opened Aug 14, 2026
AssertModResult aborts unconditionally when the modulus is zero Open

Difficulty 1/5 Under an hour Newbie friendliness 85/100

MozillaSecurity/cryptofuzz#23 · Opened Aug 5, 2026
Verbose bugzilla error response Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

MozillaSecurity/grizzly#548 · Opened Jul 29, 2026
[prefmonitor] - Template pref "dom.navigation.webidl.enabled" can be removed Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

MozillaSecurity/prefpicker#195 · Opened Jul 13, 2026
Add whiteboard command for requesting a pernosco trace on a newer build Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

MozillaSecurity/bugmon#68 · Opened Jun 22, 2026
[prefmonitor] - Template pref "layout.css.style-queries.enabled" can be removed Open

Difficulty 1/5 Under an hour Newbie friendliness 68/100

MozillaSecurity/prefpicker#194 · Opened Jun 22, 2026
Proposal: Scoped differential corpus & target proposal for Bitcoin Core-inspired modules Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

MozillaSecurity/cryptofuzz#21 · Opened Jun 17, 2026
Can't file a site report bug or ETP bug if bucket has no reports with comments Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

MozillaSecurity/WebCompatManager#241 · Opened Jun 15, 2026
Add an ability to search for term only Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

MozillaSecurity/WebCompatManager#235 · Opened Jun 9, 2026
Add a BQ client helper function Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

MozillaSecurity/WebCompatManager#218 · Opened May 25, 2026
[prefmonitor] - Template pref "dom.webserial.enabled" can be removed Open

Difficulty 1/5 Under an hour Newbie friendliness 78/100

MozillaSecurity/prefpicker#189 · Opened Apr 27, 2026
Set status and `Ever confirmed` on confirmation Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

MozillaSecurity/bugmon#66 · Opened Mar 25, 2026
Surface installed extensions when known, and consider using them for clustering Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/WebCompatManager#154 · Opened Mar 23, 2026
Add an optional poll for acquire_job_lock Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

MozillaSecurity/WebCompatManager#152 · Opened Mar 21, 2026
Hide buckets for NSFW domains by default Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/WebCompatManager#149 · Opened Mar 18, 2026
Import site rank data Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/WebCompatManager#148 · Opened Mar 18, 2026
Allow filtering by global and country site ranks, and report language / origin Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

MozillaSecurity/WebCompatManager#147 · Opened Mar 18, 2026
Don't update bug if it's changed since fetching Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

MozillaSecurity/bugmon#64 · Opened Feb 23, 2026
Implement "content based" grouping of user reports Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

MozillaSecurity/WebCompatManager#107 · Opened Feb 11, 2026
Use live table to import reports Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

MozillaSecurity/WebCompatManager#84 · Opened Jan 29, 2026
Don't show empty buckets or buckets with only invalid reports in the list Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

MozillaSecurity/WebCompatManager#66 · Opened Jan 13, 2026
Using deprecated class WindowsSelectorEventLoopPolicy of module asyncio (deprecated-class) Open

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

MozillaSecurity/grizzly#527 · 2 comments · Opened Jan 6, 2026
The jekyll summaries we generate are bad Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

MozillaSecurity/attackanddefense.dev#19 · Opened Dec 18, 2025
Some reports are missing in the db Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/WebCompatManager#55 · Opened Dec 12, 2025
libfuzer-js is no longer accessible Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/cryptofuzz#15 · Opened Dec 5, 2025
Stop signature matching for fixed buckets. Open

crashmanager enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

MozillaSecurity/FuzzManager#1120 · Opened Dec 2, 2025
Serialization mismatches break DSA_PrivateToPublic and KDF_SRTP/SRTCP structured inputs Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

MozillaSecurity/cryptofuzz#12 · 1 comment · Opened Nov 30, 2025
Add activity chart to spike detection view Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

MozillaSecurity/WebCompatManager#54 · Opened Nov 27, 2025
Should add a sanity check for searchfox downloads Open

Difficulty 2/5 1-3 hours Newbie friendliness 62/100

MozillaSecurity/fuzzfetch#182 · Opened Nov 14, 2025
Consider using Pernosco javascript extension Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

MozillaSecurity/bugmon#63 · Opened Oct 16, 2025
Image dependency staging should be retried on error Open

orion-builder

Difficulty 3/5 1-2 days Newbie friendliness 48/100

MozillaSecurity/orion#700 · Opened Oct 9, 2025
KeyError: 'crashreporter' Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

MozillaSecurity/fuzzfetch#164 · Opened Jul 28, 2025
Drop invalid URLs/hostnames Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

MozillaSecurity/WebCompatManager#46 · Opened Jul 10, 2025
Allow defining fixed resources in fuzzing-tc-config Open

fuzzing-decision

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/orion#638 · Opened May 28, 2025
Merge whiteboard requests when publishing Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

MozillaSecurity/bugmon#60 · Opened May 19, 2025
[afl] Misconfigured fuzzmanager reporter? Open

MozillaSecurity/orion#619 · 2 comments · 1 assignee · Opened Apr 29, 2025
Don't hide the "file new bug" buttons when a bug has been assigned Open

priority:p1

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

MozillaSecurity/WebCompatManager#38 · Opened Apr 29, 2025
Remove indirect usages of six Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

MozillaSecurity/grizzly#495 · 3 comments · Opened Apr 22, 2025
WebTransport server startup failure Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

MozillaSecurity/grizzly#494 · Opened Apr 21, 2025
Show known-unresolved-bugzilla bugs inline Open

priority:p3

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/WebCompatManager#34 · Opened Apr 16, 2025
Automatically re-open buckets that are supposed to be fixed Open

priority:p3

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/WebCompatManager#33 · Opened Apr 16, 2025
Message: User [:user] <user@mozilla.com> is not currently accepting "needinfo" requests. Code: 32000 Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

MozillaSecurity/bugmon#58 · Opened Apr 7, 2025
Add tests for taskmanager pulse listener Open

taskmanager

Difficulty 3/5 1-2 days Newbie friendliness 25/100

MozillaSecurity/FuzzManager#1084 · Opened Apr 3, 2025
Automate the creation of a nightly-as-release variant Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/prefpicker#148 · 1 comment · Opened Mar 27, 2025
Crashes and Signatures views should allow temporary tool filter edits Open

crashmanager enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/FuzzManager#1068 · 1 comment · Opened Mar 18, 2025
Template should be associated with a bug provider Open

bugzilla crashmanager

Difficulty 4/5 3-5 days Newbie friendliness 35/100

MozillaSecurity/FuzzManager#1059 · Opened Feb 26, 2025

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

MozillaSecurity

Showing the newest 100

Get new issues in your inbox