mirror of
https://github.com/curl/curl.git
synced 2026-05-04 06:57:56 +03:00
18 lines
569 B
Markdown
18 lines
569 B
Markdown
<!--
|
|
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
|
|
SPDX-License-Identifier: curl
|
|
-->
|
|
|
|
# The curl bug bounty
|
|
|
|
Up until the end of January 2026 there was a curl bug bounty. It is no more.
|
|
|
|
The curl project does not offer any rewards for reported bugs or
|
|
vulnerabilities. We also do not aid security researchers to get such rewards
|
|
for curl problems from other sources either.
|
|
|
|
A bug bounty gives people too strong incentives to find and make up "problems"
|
|
in bad faith that cause overload and abuse.
|
|
|
|
We still appreciate and value valid vulnerability reports.
|