Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
Re: Minor curl vulnerabilities in the open
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Fri, 23 Oct 2026 09:13:15 +0200 (CEST)
On Tue, 20 Oct 2026, Daniel Stenberg via curl-library wrote:
> Starting Monday October 26, we switch to handling all vulnerabilities at
> severity LOW or MEDIUM on GitHub - publicly and in the open.
I'm thinking we add two new separate tags to use for such issues:
vuln:LOW
vuln:MEDIUM
We can use them for both the issue and the corresponding pull-requests. I also
think we add the same name tags in the curl-www repo, as each Security
Advisories will have their own dedicated pull-request there. One for each
pending CVE publication.
As of right now, we have 13 pending advisories that all will be created as
pull-requests on Monday, and their corresponding HackerOne issues will be
cloased as "resolved".
Date: Fri, 23 Oct 2026 09:13:15 +0200 (CEST)
On Tue, 20 Oct 2026, Daniel Stenberg via curl-library wrote:
> Starting Monday October 26, we switch to handling all vulnerabilities at
> severity LOW or MEDIUM on GitHub - publicly and in the open.
I'm thinking we add two new separate tags to use for such issues:
vuln:LOW
vuln:MEDIUM
We can use them for both the issue and the corresponding pull-requests. I also
think we add the same name tags in the curl-www repo, as each Security
Advisories will have their own dedicated pull-request there. One for each
pending CVE publication.
As of right now, we have 13 pending advisories that all will be created as
pull-requests on Monday, and their corresponding HackerOne issues will be
cloased as "resolved".
-- / daniel.haxx.se || https://rock-solid.curl.dev -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2026-10-23