Google has launched a new initiative called OSS VRP (Open Source Software Vulnerability Rewards Program) to provide monetary rewards for identifying security issues in open-source projects like Bazel, Angular, Go, Protocol Buffers, and Fuchsia, as well as in projects developed in Google repositories on GitHub (Google, GoogleAPIs, GoogleCloudPlatform, etc.) and their dependencies.
This new initiative complements existing reward programs covering projects such as the Linux kernel, Chrome, Chrome OS, Android, and Kubernetes. Over the past 12 years of such programs, Google has paid out $38 million in rewards for the discovery of more than 13,000 vulnerabilities. Rewards range from $100 to $31,337 depending on the severity of the vulnerability and the project's significance. For particularly interesting vulnerabilities, the payout amount may be increased.
Source: opennet.ru
