Announcing the ProjectDiscovery OSS Bounty Program
Update: OSS Bounty Program Closed The ProjectDiscovery OSS Bounty Program is currently closed. We launched the program to reward meaningful open-source contributions, but over time we saw a growing volume of low-quality and heavily AI-generated submissions that created more review overhead than value for maintainers. For now, we’ve decided to shut down the program. We’re grateful to everyone who contributed thoughtful, high-quality work while it was active. Regular open-source contributions
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.