Swamped curl maintainers take low-level flaws public to survive vulnerability avalanche

The Register reports that curl will move low- and medium-severity vulnerability reports to public GitHub issues after maintainers were overwhelmed by a surge of reports, many of them quickly assessed as low severity; high- and critical-severity reports will remain private.

Source: The Register