Supply Chain Security

Google Temporarily Pauses OSS VRP Product Vulnerability Reports

Google has temporarily paused product vulnerability submissions under its Open Source Software Vulnerability Rewards Program after a surge in invalid automated reports, while supply-chain rewards remain available.