Skip to main content


#curl bug-bounty award amounts, after the two most recent ones. Accumulated 68,320 USD now. The new curl record payout was 4660 USD for CVE-2023-38545.
#curl
in reply to tpoliaw

@tpoliaw it's a fixed amount per severity grade, and the IBB sets the amounts... IBB is the org that pays our bounties.