Curl Ends Security Embargo Policy

Curl announced a new vulnerability disclosure policy where low and medium severity reports go into the public issue tracker instead of being privately reported. This change aims to reduce pressure on volunteer developers overwhelmed by hundreds of daily CVEs. The shift moves away from the traditional embargo model to prioritize developer sanity over strict security timelines for non-critical bugs.