Mmastodon TechnologySoftware first seen 22 h ago, last 22 h ago, peak #1
Blogger backs curl's policy against embargoing low-severity flaws
Original: I wrote a blog that explains why why the new # curl security policy to not embargo low and medium vulnerabilities is a g
Security researcher Josh Bressers has published a blog arguing that curl's new policy of not embargoing low and medium severity vulnerabilities is a good idea, saying other open source projects should adopt it. He contends that embargoing minor bugs adds burden without benefit for maintainers and users. The move is drawing attention in the open source security community.
Why now: curl's change to its vulnerability disclosure policy is prompting debate about best practices for open source security.
curlJosh BressersOpen Source Security
Evidence
- I wrote a blog that explains why why the new # curl security policy to not embargo low and medium vulnerabilities is a great idea and other open source projects should adopt this policy https:// opensourcesecurity.io/2026/10- embargo/ # OpenSourceSecurity # vulnerability #… · joshbressers@infosec.exchange · 3
API: https://socialmediatrends-api.osmike.com/v1/trends/3806610