Node.js Security Bug Bounty Program Paused

6 hours ago

The Node.js security bug bounty program is paused due to the end of external funding from the Internet Bug Bounty (IBB) program.
Security vulnerability reporting through HackerOne continues unchanged, but without monetary rewards for reports.
The Node.js Security Team remains committed to security with the same disclosure policies and response times.

Hasty Briefsbeta