The home for great developer writing.

We surface the best developer writing from thousands of independent blogs, updated daily.

curl security moves again

· Daniel Stenberg · Feb. 25, 2026, 7:06 a.m.

cURL and libcurl github Security hackerone curl Security hackerone bug bounty

Summary

The curl development team has reversed its decision to accept security reports on GitHub, returning to Hackerone for their bug-bounty program due to the inadequacies of the former approach.

Read full post on daniel.haxx.se →

MORE POSTS LIKE THIS

The end of the curl bug-bounty

Daniel Stenberg · Jan 26, 2026

cURL and libcurl bug bounty

github: Block users directly from security advisories

Sujith Quintelier · Aug 26, 2026

github Security

Supply chain attach on cargo crates.io? is your publish credential safe?

Users Rust Lang · Aug 20, 2026

Security Supply Chain Attack

Aikido Security tracks Shai-Hulud npm package infection surge

Developer Tech · Aug 4, 2026

Open Source Cybersecurity

Multi-billion install cURL takes security reports summer holiday

Thestack · Jun 15, 2026

Open Source Security

GitHub Patches Critical Flaws in Enterprise Server Update

Securityonline · May 27, 2026

github GPG Key Rotation

Discover more posts →

AUTHOR

Sponsored

Zulip

Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.

Become a sponsor →

BLOG POST FEATURED ON

Placeholder image

Placeholder image

Add this plugin to your blog