search
Open Source Vulnerability Reward Program
Trends
- 1Google freezes open-source bug bounty amid AI-generated junk reports●Google freezes open-source bug bounty program amid flood of invalid AI slop
Google has suspended part of its Open Source Vulnerability Reward Program after a surge of low-quality, apparently AI-generated bug reports overwhelmed reviewers. From October 1, the program will no longer accept submissions for product vulnerabilities, with Google citing an influx of invalid reports as the reason. Commenters point to the episode as a side effect of automated AI tools mass-filing security bugs in hopes of bounties.
- 2Google pauses bug bounty submissions for open-source software●Google stellt Bug-Bounty-Programm für Open Source vorerst ein Google nimmt seit 1. Oktober im Bug-Bounty-Programm für Op
Google has stopped accepting vulnerability reports for open-source software through its bug bounty program as of October 1. The company will temporarily no longer pay rewards for product flaws found in open-source projects, though reports on its own flagship products continue. The move is drawing attention in the security community, as the open-source incentive program was seen as an important way to support researchers auditing widely used projects.
- 3Google suspends open source bug bounty submissions●Google temporarily suspends bug bounty program for open source As of October 1st, Google is no longer accepting product
Google has temporarily stopped accepting product vulnerability reports under its bug bounty program for open-source software as of October 1st. The pause means security researchers can no longer submit findings for Google open-source projects for the time being. The company has not fully explained the reasons, and observers are watching whether the program will resume and what the move means for open-source security research.