Reports: Google has paused its Open Source Software Vulnerability Rewards Program, according to TechCrunch on October 4, 2026.
The outlet says the program, which rewarded researchers for finding vulnerabilities in Google's open source software, was paused as of October 1. Google said in posts on X and on the program website that it will provide "an update" in the first quarter of 2027.
TechCrunch quotes Google: "This pause is due to a significant rise in automated submissions, the vast majority of which are not valid." Citing Tom's Hardware, TechCrunch says Google engineers and open source maintainers were overwhelmed by reports that were invalid or contained hallucinations.
Participants are encouraged to consider Google's other bug bounty programs. Details are as reported by the outlet and may change when Google publishes its update.