SecurityBleepingComputerabout 2 hours ago
Curl Ends Paid Bug Bounty Program
6 min read
On January 31, 2026, curl ended its paid bug bounty program after submission quality deteriorated. Maintainer Daniel Stenberg confirmed vulnerabilities fell from above 15% to below 5% starting in 2025. The program had helped uncover 87 confirmed vulnerabilities and paid researchers more than $100,000 across its lifetime.
Level
Hype check
Tap to vote and see what everyone thinks.