Google Halts OSS VRP Due to AI Spam The End of Product Vulnerability Submissions Google recently announced that, effective October 1, 2026, its Open Source Software Vulnerability Reward Program (OSS VRP) will permanently cease accepting submissions for product vulnerabilities. Importantly, this sweeping policy adjustment will not affect any product vulnerabilities formally submitted prior to that…

Continue Reading