Curated security research, vulnerabilities, advisories and tools for practitioners.

#curl

Security coverage tagged curl.

1.

curl removed from Omnibus-GitLab FIPS packages in 19.0

blog | 2026-04-24 00:00 | about.gitlab.com | original ↗ | #supply-chain | #gitlab | #compliance

2.

Bug bounty isn’t dead, but the old model is breaking

blog | 2026-04-13 00:00 | aikido.dev | original ↗ | #ai-security | #bug-bounty | #open-source

3.

Best Practices for Getting Ahead of AI Slop with Exposure Management

blog | 2026-02-27 08:28 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #open-source

4.

Hacker opinion piece: How lazy hacking killed cURL’s bug bounty

blog | 2026-02-05 13:00 | bugcrowd.com | original ↗ | #ai-security | #bug-bounty | #zero-day

5.

How we applied advanced fuzzing techniques to cURL

blog | 2024-03-01 14:30 | blog.trailofbits.com | original ↗ | #open-source | #fuzzing | #curl

6.

Securing open-source infrastructure with OSTIF

blog | 2024-01-09 14:00 | blog.trailofbits.com | original ↗ | #open-source | #code-review | #security-audit

7.

CVE-2023-38545 high severity vulnerability in cURL: everything you need to know

vulnerability | 2023-10-11 16:56 | CVE-2023-38545 | wiz.io | original ↗ | #cloud-security | #vulnerability | #patching

8.

The curl quirk that exposed Burp Suite & Google Chrome

research | 2023-03-28 13:13 | portswigger.net | original ↗ | #burp-suite | #vulnerability-research | #web-security

9.

cURL audit: How a joke led to significant findings

blog | 2023-02-14 13:00 | blog.trailofbits.com | original ↗ | #vulnerability-research | #fuzzing | #memory-corruption

10.

How to share what you’ve learned from our audits

blog | 2022-12-22 20:10 | CVE-2022-43552 | blog.trailofbits.com | original ↗ | #vulnerability-disclosure | #curl | #audits