The curl project announces a 'summer of bliss' in July 2026, during which they will not accept or process any vulnerability reports through HackerOne or email. The project's maintainers will use this time for rest and to work on bug fixes and new features at a more relaxed pace. The next release (8.22.0) is being pushed back two weeks to September 2, 2026, to allow time to address any backlog after the break.
Background
curl is a widely-used open source command line tool and library for transferring data with URLs, supporting various protocols. The project has been under significant pressure due to high volumes of vulnerability reports in recent months.
- Source
- Lobsters
- Published
- Jun 15, 2026 at 03:53 PM
- Score
- 5.0 / 10