# AI-generated reports impacting open-source security > Live situation record from CLSTR: https://clstr.news/situations/ai-generated-reports-impacting-open-source-security > Updated: 2026-10-16T10:00:00.000Z. Sources: 16. Developments: 2. The open-source security community is experiencing significant strain due to a surge in low-quality, AI-generated vulnerability reports. These submissions, sometimes referred to as ‘AI slop’, often contain “hallucinations” or describe non-existent security flaws, forcing engineers and maintainers to spend excessive time manually verifying invalid or duplicate findings. In response to this influx, Google temporarily suspended product vulnerability submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) in October 2026, though software supply chain and certain Cloud-related reports remain active. The company intends to provide an update on a restructured submission framework in early 2027. Beyond corporate responses, the trend is contributing to broader maintainer burnout. Many open-source maintainers face inadequate compensation and high workloads, leading some to consider abandoning their projects. For instance, the lead developer of the cURL project announced the termination of that project’s bug-bounty program, scheduled for January 2026, amid these mounting pressures. ## Timeline ### 2026-10-16: Open-source maintainers face pressure from AI-generated reports Open-source maintainers are struggling with burnout and unpaid labor, exacerbated by a surge in low-quality, AI-generated vulnerability reports that complicate the triage process. 2 sources. https://clstr.news/cluster/open-source-maintainers-face-pressure-from-ai-generated-reports ### 2026-10-04: Google pauses open source bug bounty program due to AI reports Google has paused its Open Source Software Vulnerability Rewards Program due to a surge in invalid, AI-generated bug reports that have overwhelmed security engineers and maintainers. 14 sources. https://clstr.news/cluster/google-pauses-open-source-bug-bounty-program-due-to-ai-reports --- Cite as: AI-generated reports impacting open-source security. CLSTR, https://clstr.news/situations/ai-generated-reports-impacting-open-source-security