AI helped find most of curl's 24 new CVEs. What made them real was the human check.
This story is from 2026-10-14. It is preserved in the archive; the latest stories are on the live feed.
In January, curl shut down its bug bounty. Daniel Stenberg said the goal was to remove the incentive for people to send "crap and non-well researched reports to us. AI generated or not." The last week of the program brought seven reports and none of them described a vulnerability. Today, curl 8.23.…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-14 11:57 · DEV Community — AI
AI helped find most of curl's 24 new CVEs. What made them real was the human check.