We are at *twenty* hackerone submissions for #curl so far this year. Zero of them a confirmed vulnerability.
daniel:// stenberg://
daniel:// stenberg://
npub1cm0d...enqe
I write curl. I don't know anything.
website: https://daniel.haxx.se/
github: https://github.com/bagder
When I find myself working in a big pile of metaphorical manure, I can always bring out this email I received on this day, nine years ago...


You're absolutely right
On the morning of the 13th day of the year we have received *checks notes* 13 #curl vulnerability reports on Hackerone this year.
None a confirmed vulnerability.
typo of the day "curl --limit-rage ..."
I really want to love matrix.org but ...
said in the IRC channel earlier
"curl is a sticker and image compression project that happens to release network software"
#curl 8.18.0 with Daniel Stenberg
buckle up and prepare for an unload of *six* CVEs against #curl getting published tomorrow, severity low and medium