1
0
mirror of https://github.com/moparisthebest/curl synced 2024-08-13 17:03:50 -04:00

docs/BUG-BOUNTY.md: for vulns published since Aug 1st 2018

[ci skip]
This commit is contained in:
Daniel Stenberg 2018-10-12 09:11:54 +02:00
parent a47a264492
commit aaab08311b
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2

View File

@ -38,6 +38,10 @@
Bounties need to be requested within twelve months from the publication of
the vulnerability.
The vulnerabilities must not have been made public before August 1st, 2018.
We do not retroactively pay for old, already known and published security
problems.
## Product vulnerabilities only
The bug bounty only concerns the curl and libcurl products and thus their