From October 26, only high and critical cases stay private as project seeks help sharing the workload An avalanche of vulnerability reports is forcing curl to move lower severity cases into public view, reserving private handling for high and critical flaws. From October 26, low and medium severity reports should be filed in the open source data transfer tool public GitHub repository, maintainer Daniel Stenberg said . Security researchers in doubt can still submit the issue on HackerOne and...

Read the full article at The Register