Google has suspended product vulnerability submissions to its Open Source Software Vulnerability Reward Program until 2027 due to an overwhelming influx of invalid, AI-generated bug reports. Maintainers plan to restructure the initiative while directing researchers to other reward tracks.