in reply to daniel:// stenberg://

Boosting because this page says the first cURL release was on December 17, 1996
curl.se/docs/history.html

Almost four years (1996-12-17 to 2000-10-13) before a CVE was reported is really high code quality to me.
Congrats to everyone involved that resulted in that high code quality.

Yes, I know that it might also partially be due to an initially small user base. But to me cURL is working in a "messy/sloppy" domain, especially in those days. So I'm celebrating good code quality.