cURL pauses vulnerability reporting for July 2026, sparking security concerns
cURL’s maintainer Daniel Stenberg announced a month‑long “summer of bliss” – the project will not accept any vulnerability reports in July 2026. The pause aims to curb maintainer burnout, but it leaves users without a formal way to report critical issues, shifting risk to paid support contracts.