So far in 2025, we have received 52 vulnerability reports submitted to #curl. Two per week on average.

5 have been confirmed security problems (and have been published)

11 were tagged AI slop; all banned and reported to HackerOne

15 were considered "normal bugs"

21 were deemed "not applicable" (various reasons)