romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-25 06:53:31 +03:00
Code Issues Projects Releases Packages Wiki Activity

fixup BUG-BOUNTY.md to say less "no longer"

Browse source
This commit is contained in:
Daniel Stenberg 2026-01-22 09:48:42 +01:00
parent cc8df2b13d
commit f868b09d78
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 3 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/BUG-BOUNTY.md
View file

@ -8,12 +8,11 @@ SPDX-License-Identifier: curl
Up until the end of January 2026 there was a curl bug bounty. It is no more.
The curl project no longer offers any rewards for reported bugs or
The curl project does not offer any rewards for reported bugs or
vulnerabilities. We also do not aid security researchers to get such rewards
for curl problems from other sources either.
We have concluded the hard way that a bug bounty gives people too strong
incentives to find and make up "problems" in bad faith that cause overload and
abuse.
A bug bounty gives people too strong incentives to find and make up "problems"
in bad faith that cause overload and abuse.
We still appreciate and value valid vulnerability reports.