Google Pauses Its Open-Source Bug Bounty After AI Floods the Pipeline
Google froze OSS VRP product-vulnerability submissions on 1 October 2026 after a surge of invalid AI reports. The pause is a triage problem, not a security one — and Indian OSS teams should change intake now.
October 05, 2026
3 min read