curl 8.21.0

Release presentation At 09:00 UTC (11:00 CEST) today I will do a traditional live-streamed release presentation of this release over on my Twitch channel. Numbers the 275th release6 changes56 days (total: 10,817)276 bugfixes (total: 14,187)531 commits (total: 39,077)0 new public libcurl function (total: 100)0 new curl_easy_setopt() option (total: 308)1 new curl command line option (total: … Continue reading curl 8.21.0 →

daniel.haxx.se

We publish 18 new #curl vulnerabilities in association with this release. They are all listed in this email. 4 MEDIUM, 14 LOW.

https://curl.se/mail/lib-2026-06/0026.html

curl: [SECURITY ADVISORIES] for curl 8.21.0

@bagder It's probably hard to have a good sense of this, but given what you said in a blog a while back (the Mythos one, I believe) about LLMs mainly finding versions of known exploits rather than discovering new types: Do you think there's reason to worry that LLM-assisted "low-hanging fruit"-searching is taking too much security researcher time, distracting from looking for genuinely new stuff?