daniel:// stenberg://Jan 26

The end of the #curl bug-bounty

https://daniel.haxx.se/blog/2026/01/26/the-end-of-the-curl-bug-bounty/

The end of the curl bug-bounty

tldr: an attempt to reduce the terror reporting. There is no longer a curl bug-bounty program. It officially stops on January 31, 2026. After having had a few half-baked previous takes, in April 2019 we kicked off the first real curl bug-bounty with the help of Hackerone, and while it stumbled a bit at first … Continue reading The end of the curl bug-bounty →

daniel.haxx.se
Show threadAddisonJan 26
@bagder RIP, it was probably one of the best
Show threadAddison
@bagder Oh, actually related: the IBB HackerOne listing still lists curl, should this be removed from the IBB listings as well? https://hackerone.com/ibb/policy_scopes
HackerOne

HackerOne
Jan 26 at 7:47amWeb
Show threaddaniel:// stenberg://Jan 26
@addison I believe it will be removed by the end of January when this officially goes into effect
Show threadAddisonJan 26
@bagder Gotcha, just wanted to ask to make sure since they were listed separately.