RealFeedApp Curl moves low/medium security reports from private to public tracking
The Curl project changed its vulnerability disclosure policy: reports on low and medium severity issues are now published immediately via the public issue tracker. This change aims to reduce the burden on developers and speed up bug fixes.
- Field
- computer security
- What they did
- The Curl project decided that vulnerabilities rated as low or medium severity will be published in the public issue tracker instead of being reported privately.
- Why it matters
- This should help reduce the burden on developers who are currently overwhelmed by too many vulnerability reports.
#curl#vulnerability disclosure#open source#security policy#issue tracker
