Curl shutters bug bounty program to remove incentive for submitting AI slop
ID: b70934b8-603d-59e7-84af-e827148b6484
STIX ID: report--b70934b8-603d-59e7-84af-e827148b6484
Feed Name: The Register (Security)
cURL maintainer Daniel Stenberg announced the end of the project’s bug bounty program in January 2026, citing a flood of low-quality, AI-generated submissions that created heavy workload without uncovering actual vulnerabilities. He hopes this will reduce noise while still encouraging responsible disclosure of real issues and reflects on balancing public critique of poor submissions with restraint.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.