Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software.The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward. Reports about supply chain compromises are still accepted, and reports filed before October 1 are
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/10/google-pauses-oss-product-bug-bounty.html
