now the #curl security page offers filtering the list of issues based on severity: curl.se/docs/security.html

(see, there was a point in figuring out the severity for old issues as well)