cURL Ends Bug Bounty Program Due to AI-Generated Reports

The cURL project has terminated its bug bounty program effective January 2026, citing difficulties in managing a surge of AI-generated bug reports. Maintainer Daniel Stenberg noted that the quality of these submissions has been poor, prompting this decision to reduce the incentive for such contributions. This issue is not isolated to cURL, as other open-source projects are facing similar challenges.