Unverified50% confidenceFactExact time
Stenberg described the total number of curl vulnerabilities found by AISLE audits over roughly the past year as "no fewer than 35 published curl vulnerabilities and CVE IDs".
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/14/2026
First Seen
Valid until: 1/12/2027
Sources
Related Entities
Related Claims
Unverifiedcurl 8.23.0 was released on October 14, fixing 24 security vulnerabilities, 20 of which came from AI-assisted research (18 from AISLE, 2 from Anthropic).64% similarUnverifiedThe curl project operates a bug bounty program through the HackerOne platform, and Stenberg has referred to the behavior of submitting AI-generated false vulnerability reports as "AI security washing".61% similarVerifiedCVE is a global vulnerability identification system maintained by the U.S. MITRE Corporation and funded by the U.S. Department of Homeland Security; since its launch in 1999, it has catalogued more than 200,000 vulnerability entries.60% similarUnverifiedThe curl project shut down its bug bounty program in January 2026 because it had received seven reports in the previous week and not one described a real vulnerability, and lead developer Daniel Stenberg said the move was aimed at eliminating the incentive for "junk and insufficiently researched reports".59% similarUnverified2006年被发现的OpenSSL整数溢出漏洞在代码库中潜伏多年，直到安全研究人员专项审计才曝光59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1025009API
curl https://kongchang.com/api/v1/knowledge/claims/1025009MCP
get_claim(id=1025009)