{
  "id": 11853111,
  "title": "Google freezes product flaw submissions to its OSS Vulnerability Reward Program over an influx of invalid AI-driven reports, plans an update by Q1 2027 (Etiido Uko/Tom's Hardware)",
  "url": "https://urgent.news/2026/10/04/google-freezes-product-flaw-submissions-to-its-oss-vulnerability",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-04T05:20:01.000Z",
  "source": {
    "name": "Techmeme",
    "slug": "techmeme",
    "url": "https://www.tomshardware.com/tech-industry/artificial-intelligence/google-suspends-part-of-the-oss-vrp-bug-bounty-program-due-to-an-influx-of-invalid-ai-submissions-product-vulnerability-submissions-ended-october-1"
  },
  "original_language": "en",
  "account": null,
  "summary": "Google has suspended product vulnerability submissions to its Open Source Software Vulnerability Reward Program (OSS VRP) due to an influx of invalid AI-driven reports. The suspension, which took effect on October 1, does not affect product vulnerabilities submitted before that date. Google has encouraged participants to explore other VRP programs and plans to provide an update by the first quarter of 2027.\n\nAccording to Tom s Hardware, engineers and open-source maintainers were overwhelmed by thousands of sloppy reports. Google will still accept reports covering product vulnerabilities through the Cloud VRP for some Google Cloud repositories impacting Google Cloud products. The suspension also does not affect OSS VRP supply chain reports.\n\nGoogle is reformatting and working on the OSS VRP program in the meantime. The company made the announcement on October 1 via an official X post. A similar case was reported in Linux, which ended support for older network drivers due to an influx of false AI-generated bug reports.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Tom's Hardware",
        "title": "Google freezes open-source bug bounty program amid flood of invalid AI slop submissions",
        "url": "https://urgent.news/2026/10/03/google-freezes-open-source-bug-bounty-program-amid-flood-of-invalid",
        "published": "2026-10-03T12:00:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}