The pressure
Simon Willison's Weblog·6d ago·Commentary
Daniel Stenberg says the curl security team is facing an unprecedented surge of credible, detailed AI-assisted vulnerability reports.
Incoming reports are now 4-5 times higher than in 2024 and twice the 2025 rate, averaging more than one per day.
The upside is that recent curl vulnerabilities have generally been LOW or MEDIUM severity, with the last HIGH CVE published in October 2023.
