It's Friday, so consider adding your favorite (or maybe least favorite) #curl thing as a quiz question here: https://github.com/curl/quiz
@bagder.mastodon.social.ap.brid.gy
@bagder.mastodon.social.ap.brid.gyIt's Friday, so consider adding your favorite (or maybe least favorite) #curl thing as a quiz question here: https://github.com/curl/quiz
@bagder.mastodon.social.ap.brid.gyWelcome ldm0 as #curl commit author 1529: https://github.com/curl/curl/pull/22902
@bagder.mastodon.social.ap.brid.gyWelcome Thanniru Sai Teja as #curl commit author 1528: https://github.com/curl/curl/pull/22903
@bagder.mastodon.social.ap.brid.gyThings to do for properly celebrating #curl 30 years in November 2026
- render new gource video with voice over comments from yours truly
- 4000+ word blog post
- all day community video meeting for everyone to join, hang-out in and chat
What else?
@bagder.mastodon.social.ap.brid.gyWelcome xhon-pelushi as #curl commit author 1527: https://github.com/curl/curl/pull/22890
@bmericc.bsky.socialcURL Hakkında Bilmediğiniz 10 Güçlü Özellik: Sadece Dosya İndirmekten Çok Daha Fazlası
#Curl #KomutSatiri #Linux #Api #Terminal #YazılımGeliştirme
@happy-homhom.bsky.social
@threadlinqs.bsky.socialCVE-2026-82533: single curl command bypasses DeepSeek Harness auth and sandbox-escapes AI agents to full host access. https://intel.threadlinqs.com/threat/TL-2026-2412 #ThreatIntel #CVE_2026_82533 #BUBBLEWRAP #curl
@bagder.mastodon.social.ap.brid.gyUpdated chart showing the share of #curl vulnerabilities caused by "C mistakes" as a share of all the vulns we know existed in code over time.
@stackflag.bsky.socialCVE-2026-19931 - curl
The libcurl library can mistakenly reuse a web connection that was authenticated for one user when another user makes a request without providing credentials. This could…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-18924 - curl
The libcurl library, which many programs use to retrieve data from the internet, can crash if it is set to share connections and receives a special HTTP/2 feature called…
Too many irrelevant or confusing CVEs? Use stackflag.com
@bagder.mastodon.social.ap.brid.gyWelcome Bobbeh Rhino as #curl commit author 1526: https://github.com/curl/curl/pull/22868
@bagder.mastodon.social.ap.brid.gyAt 6 pending #curl vulnerability reports to assess. 9 already confirmed. My goal is to reach hackerone inbox zero this week...
@bagder.mastodon.social.ap.brid.gyI switched the #curl performance tests from debug builds to optimized builds.
Here's the HTTP/1 parallel requests test as a sample of what difference it made.
@bagder.mastodon.social.ap.brid.gyI'm happy to announce three new Rock-solid #curl releases for commercial users who want/need to stick to old release branches:
https://rock-solid.curl.dev/download.html
(provided exclusively to current customers with support contracts)
@bagder.mastodon.social.ap.brid.gyAverage number of hours between each #curl vulnerability report, since March 1 2026 (excluding July as we closed during that month): 16.2
During 2025 the average interval was 48 hours ...
@bagder.mastodon.social.ap.brid.gyWelcome Tyler Yankee as #curl commit author 1525: https://github.com/curl/curl/pull/22849
@bagder.mastodon.social.ap.brid.gyEight years ago we introduced DoH in #curl as I had just written the implementation for Firefox...
@bagder.mastodon.social.ap.brid.gyIt feels a little embarrassing that I could speed up URL (percent) encoding in #curl 500% with this: https://github.com/curl/curl/pull/22780
@bagder.mastodon.social.ap.brid.gyWelcome Fredrik Blau as #curl commit author 1524: https://github.com/curl/curl/pull/22745