We do offer discretinary bounties for security vulnerability that have complete (C) or partial (P) impact on Availability (A), Integrity (I) or Confidentiality (C). Please reach out at security@golang.cafe to report any possible vulnerability.