Stenberg: The pressure

curl maintainer Daniel Stenberg describes the unprecedented stress on the curl security team, which is dealing with an avalanche of security reports. With half the release cycle remaining, the project already has 12 confirmed vulnerabilities pending CVE announcements — a new project record. At this pace, curl will publish at least 30 CVEs in 2026 before mid-year, with the projected annual total being at least double that number.