Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports
Google has temporarily closed its Open Source Software Vulnerability Reward Program (OSS VRP) to product vulnerability submissions, saying a growing number of automated reports, most of them invalid, prompted the move. The pause was announced on X on October 1. “This pause is due to a significant rise in automated submissions, the vast majority of which are not valid,” Google said. Only product vulnerabilities are covered by the pause. According to Google, it has no…
Read More
