1.curl removed from Omnibus-GitLab FIPS packages in 19.0blog | 2026-04-24 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #gitlab | #compliance
2.Bug bounty isn’t dead, but the old model is breakingblog | 2026-04-13 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #bug-bounty | #open-source
3.Best Practices for Getting Ahead of AI Slop with Exposure Managementblog | 2026-02-27 08:28 | hackerone.com | Original ↗ | .md | #ai-security | #bug-bounty | #open-source
4.Hacker opinion piece: How lazy hacking killed cURL’s bug bountyblog | 2026-02-05 13:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #bug-bounty | #zero-day
5.How we applied advanced fuzzing techniques to cURLblog | 2024-03-01 14:30 | blog.trailofbits.com | Original ↗ | .md | #open-source | #fuzzing | #curl
6.Securing open-source infrastructure with OSTIFblog | 2024-01-09 14:00 | blog.trailofbits.com | Original ↗ | .md | #open-source | #code-review | #security-audit
7.CVE-2023-38545 high severity vulnerability in cURL: everything you need to knowvulnerability | 2023-10-11 16:56 | CVE-2023-38545 | wiz.io | Original ↗ | .md | #cloud-security | #vulnerability | #patching
8.The curl quirk that exposed Burp Suite & Google Chromeresearch | 2023-03-28 13:13 | portswigger.net | Original ↗ | .md | #burp-suite | #vulnerability-research | #web-security
9.cURL audit: How a joke led to significant findingsblog | 2023-02-14 13:00 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #fuzzing | #memory-corruption
10.How to share what you’ve learned from our auditsblog | 2022-12-22 20:10 | CVE-2022-43552 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-disclosure | #curl | #audits