Skip to main content

mastodon - Link to source
In 2022 alone, the #curl project's bug bounty paid 30,000 USD in reward money.
Accumulated curl bug-bounty payouts since 2018
#curl
in reply to daniel:// stenberg://

Jimmy Sjölund
mastodon - Link to source
Jimmy Sjölund
• •
Is that because there was more money to pay rewards or because there was more bugs?
in reply to Jimmy Sjölund

daniel:// stenberg://
mastodon - Link to source
daniel:// stenberg://
• •
@jimmysjolund In 2022 no less than 21 CVEs were registered in total for curl, which is the second busiest year so far. Because people are looking really hard to find the cracks. I blogged about it last year: daniel.haxx.se/blog/2022/08/22…

Increased CVE activity in curl? | daniel.haxx.se

daniel.haxx.se
@Jimmy Sjölund
⇧