security.txt.in

#***************************************************************************
#                                  _   _ ____  _
#  Project                     ___| | | |  _ \| |
#                             / __| | | | |_) | |
#                            | (__| |_| |  _ <| |___
#                             \___|\___/|_| \_\_____|
#
# The curl open source project accepts security reports for problems found in
# products made by the curl project.
#
# We offer NO (zero) rewards or other kinds of compensation for reported
# problems, but we offer gratitude and acknowledgments clearly stated in
# documentation around confirmed issues.
#
# We will ban you and ridicule you in public if you waste our time on crap
# reports.

Contact: https://hackerone.com/curl

Policy: https://curl.se/dev/vuln-disclosure.html

Preferred-Languages: en

Acknowledgments: https://curl.se/docs/security.html

Expires: %date

Canonical: https://curl.se/.well-known/security.txt

Bug-Bounty: False