search
OSS Vulnerability Reward Program
Trends
- 1Google stops accepting product vulnerabilities in OSS bug bounty●Google no longer accepting product vulnerabilities submitted to the OSS VRP
Google has updated the rules of its Open Source Software Vulnerability Reward Program so that product vulnerabilities are no longer accepted under it. Submissions concerning products like Chrome or Android will instead need to go through the company's dedicated product-specific reward programs. Security researchers discussing the change are weighing whether it simplifies reporting or makes it harder to know where to submit findings.