BUG-BOUNTY.md: minor rephrase to say there is no bug bounty

also add a brief mention to VULN-DISCLOSURE-POLICY.md

Closes #20878
This commit is contained in:
Daniel Stenberg 2026-03-10 17:10:37 +01:00
parent a4f90969ff
commit ed7bf43a08
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
3 changed files with 6 additions and 6 deletions

View file

@ -9,6 +9,9 @@ SPDX-License-Identifier: curl
This document describes how security vulnerabilities are handled in the curl
project.
There is no bug bounty and the curl project never offers rewards for reported
vulnerabilities.
## Publishing Information
All known and public curl or libcurl related vulnerabilities are listed on