Skip to content
What are you looking for?. Open searchSR

Source

Google VRP na mreži X

1 item

The account of Google's vulnerability reward programs on X. Primary for announcements the team publishes only there, such as the reason it gave for pausing part of the open source program in October 2026, which the rules page does not state. Only this account: the host is recorded with its path, so no other X account is covered.

x.com ↗

Industrymedium signal

Google stops taking product vulnerability reports in its open source bug bounty

Google no longer accepts product vulnerability reports in its Open Source Software Vulnerability Reward Program (OSS VRP), effective October 1, 2026. Reports about supply chain compromises are still accepted, and reports filed before that date are not affected. Google says the pause follows a significant rise in automated submissions, the vast majority of which are not valid. The company commits to an update in the first quarter of 2027.

Googleverified