Hacker News Reader

Tangential.. are there bug bounties available for vulns in open source projects?

A lot of open source project owned by large corporations do.

More independent projects sometimes does it to, for example curl.