BUG-BOUNTY.md. mention the medium bounty amount in 2025

Closes #17470
This commit is contained in:
Daniel Stenberg 2025-05-28 08:29:40 +02:00
parent 4dacb79fcd
commit 6eea7219a5
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2

View File

@ -31,8 +31,7 @@ Bounty and they set the reward amounts. If it would turn out that they set
amounts that are way lower than we can accept, the curl project intends to
"top up" rewards.
In 2022, typical "Medium" rated vulnerabilities have been rewarded 2,400 USD
each.
In 2025, typical "Medium" rated vulnerabilities are rewarded 2,500 USD each.
## Who is eligible for a reward?