Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

Reported by SecurityWeek (Eduard Kovacs)

Summary by Cyber Security News5 Oct 2026, 16:26 CEST

About this summary. This is a short, independently written summary of an article first published by SecurityWeek. Cyber Security News did not report or verify the underlying story. Read the original: https://www.securityweek.com/google-narrows-open-source-bug-bounty-amid-wave-of-invalid-automated-reports/

Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP).

Read the full article at SecurityWeek →

Source attribution: headline and facts are from SecurityWeek (securityweek.com). Summary method: excerpt of the source description. See our source attribution policy.