SecurityLobstersabout 1 hour ago
Curl Opens Low Severity Bugs Publicly
5 min read
The curl project changes its vulnerability disclosure policy starting October 26 2026. All LOW and MEDIUM severity reports must now be submitted to the GitHub repository instead of the private HackerOne tracker. Only HIGH and CRITICAL vulnerabilities remain private. This shift aims to reduce maintainer overload caused by an avalanche of submissions, many generated by AI models creating unrealistic combinations.
Level
Hype check
Tap to vote and see what everyone thinks.
