Curl ending bug bounty program after flood of AI slop reports
ID: 7f458b96-159b-53a8-919c-c2bd5269eb52
STIX ID: report--7f458b96-159b-53a8-919c-c2bd5269eb52
Feed Name: Bleeping Computer
The curl project is shutting down its HackerOne bug bounty program at the end of January 2026 after being inundated with low-quality, AI-generated reports; going forward, it will accept vulnerability reports directly via GitHub, provide no monetary rewards, and enforce a stricter policy as reflected in its updated security.txt.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.