Workshop Basel day one 🔗
On this hot summer’s day in Basel, Switzerland, the seventh HTTP workshop started. These events tend to work roughly the same way and the people in th [...]
daniel.haxx.se
Posts
Do excellent vulnerability reports 🔗
Over the years, we have received, read and handled way over one thousand vulnerability reports filed against curl. We have seen most kinds. It is time [...]
A curl mountain movie 🔗
One of my favorite visuals for known vulnerabilities in curl is the mountain. It shows how many currently known vulnerabilities were present in the co [...]
Trailing dots are the worst 🔗
Trailing dots after hostnames in URLs remain my worst enemies. I wrote about several problems with them in the past that involved those nasty things. [...]
a CVE dispute 🔗
A few years years ago the curl project signed up and became a CNA. This means that we are masters of and can allocate our own CVE identifiers. For any [...]
curl 8.21.0 🔗
Release presentation Numbers the 275th release6 changes56 days (total: 10,817)276 bugfixes (total: 14,187)531 commits (total: 39,077)0 new public libc [...]
QUERY with curl 🔗
RFC 10008 is brand new a specification detailing the new HTTP method called QUERY: This specification defines the QUERY method for HTTP. A QUERY reque [...]
curl summer of bliss 🔗
The curl project will not accept or otherwise handle any vulnerability reports during the month of July 2026. We call it the curl summer of bliss. cur [...]
A human in control 🔗
There seems to be a fair amount of people in either extremes in the current AI landscape. At one side we see the “vibe coders” who use agents and allo [...]
curl up 2026 summary 🔗
Getting curl developers and related enthusiasts into a single room to hang out in the real world for a whole weekend once a year is awesome. We find i [...]