search
OSS Vulnerability Reward Program
Trends
- 1Google stops accepting product vulnerabilities in OSS bug bounty●Google no longer accepting product vulnerabilities submitted to the OSS VRP
Google has updated the rules of its Open Source Software Vulnerability Reward Program so that product vulnerabilities are no longer accepted under it. The change was flagged on Hacker News, where security researchers are discussing what it means for people who report flaws in Google's open source projects. Reports of product vulnerabilities will now need to go through a different channel.