it sounds like the Log4J bug-bounty might soon close as well: 

daniel.haxx.se
The end of the curl bug-bounty
tldr: an attempt to reduce the terror reporting. There is no longer a curl bug-bounty program. It officially stops on January 31, 2026. After havin...


