curl's has had 188 CVEs.

Mythos was ran on it... and found one low severity CVE.

Nvidia shareholders:

Microsoft shareholders
@GossiTheDog I mean, in all fairness, cURL probably is one of the most fuzzed and audited codebases out there - @bagder wrote that each LoC has been (re)written like 4.4 times. It's also 600K LoC while Firefox is what, 21M or so?