“Summer of bliss”: curl stops accepting bug reports for a month

▤ Summary

curl will stop accepting and processing security vulnerability reports for a little over a month, from July 1 to August 3. The maintainer says the team needs a break after a sharp rise in report volume, much of it driven by AI-generated submissions. curl will still support customers with paid support contracts during that period. The announcement also highlights how limited financial backing remains for a tool used across massive numbers of devices and systems.

▦ Linked Companies