🇹🇼 Chinese, 4 October 2026, bug bounty
Google Temporarily Suspends Open Source Software Vulnerability Rewards Program
Google pauses product vulnerability reports for its Open Source Software Vulnerability Rewards Program due to automated submissions.
Google has temporarily suspended the Open Source Software Vulnerability Rewards Program (OSS VRP) due to an influx of automated submissions, most of which are not valid vulnerabilities.
The program, launched in 2022, rewards security researchers for finding vulnerabilities in Google’s open-source projects, including Bazel, Angular, and Golang.
Google plans to re-adjust the OSS VRP’s product vulnerability reporting mechanism and expects to announce further developments in the first quarter of 2027.