Not only #Mastodon, but also #LibreOffice, #LEOS, #Odoo and #CryptPad are subject to the European Commission's Open Source Programme Office bug #bounty program: https://ec.europa.eu/info/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-jan-19_en