← Commit list

a3618d166d

Andrei Rybak
Andrei Rybak
2026-05-12
SUCCESS Duration: 225s

Subject

VULN-DISCLOSURE-POLICY.md: remove mention of bug bounty reward

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

(log yok)

Commit Diff GitHub →

docs/VULN-DISCLOSURE-POLICY.md+2 -2
@@ -248,8 +248,8 @@ already do much worse harm and the problem is not really in curl.
## Debug & Experiments
Vulnerabilities in features which are off by default (in the build) and
-documented as experimental, or exist only in debug mode, are not eligible for a
-reward and we do not consider them security problems.
+documented as experimental, or exist only in debug mode, are not considered
+security problems.
The same applies to scripts and software which are not installed by default
through the make install rule.