mirror of
https://github.com/curl/curl.git
synced 2026-04-11 12:01:42 +08:00
17 lines
478 B
Markdown
17 lines
478 B
Markdown
<!--
|
|
Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
|
|
SPDX-License-Identifier: curl
|
|
-->
|
|
|
|
# No curl bug bounty
|
|
|
|
The curl project does not offer any rewards for reported bugs or
|
|
vulnerabilities. We do not aid security researchers to get such rewards for
|
|
curl problems from other sources.
|
|
|
|
A bug bounty gives people too strong incentives to find and make up "problems"
|
|
in bad faith that cause overload and abuse.
|
|
|
|
We still appreciate and value valid vulnerability reports.
|