search
OSS Vulnerability Reward Program
Trends
- 1Google stops accepting product vulnerabilities in open-source bug bounty●Google no longer accepting product vulnerabilities submitted to the OSS VRP
Google has quietly updated the rules of its Open Source Software Vulnerability Reward Program so that it no longer accepts reports of vulnerabilities in its products through that channel. Security researchers say the change narrows an avenue that had allowed bug hunters to report flaws in Google products affecting open-source dependencies, forcing them to use other reporting routes instead.