Bug Bounty

Google Pauses OSS Bug Bounty Intake—But Only for Product Flaws

Google has stopped new OSS VRP product-flaw reports; supply-chain reports, pending cases and patch rewards remain open.