cURL Project Ends Bug Bounty Program Due to AI-Generated Slop Reports

Summary

The cURL open source project, one of the most widely used software libraries for data transfer, has ended its bug bounty program due to being overwhelmed by low-quality, AI-generated vulnerability reports. The project, maintained by Daniel Stenberg, found that the volume of fabricated or nonsensical security reports generated by large language models made it untenable to continue the bounty program, as maintainers were spending excessive time triaging worthless submissions rather than addressing