{"rewrite":{"id":"r_30bd8709983d36dbe6bc5aba","clusterId":"c_78678e9b1b178186f6e7d48c","slug":"curl-project-declares-summer-of-bliss-vacation-halts-vulnerability-reports-in-july","model":"deepseek-v4-flash","headline":"Curl Project Declares 'Summer of Bliss' Vacation, Halts Vulnerability Reports in July","summary":"The open-source curl project, a foundational internet tool, will stop accepting vulnerability reports from July 1 to August 3, 2026, calling the period 'curl summer of bliss.' Lead developer Daniel Stenberg said high-quality reports have surged to 4-5 times 2024 levels, creating a backlog. The release of curl 8.22.0 is postponed to September 2 to handle the backlog.","whyItMatters":"The move signals how open-source projects are struggling with a flood of detailed vulnerability reports, partly driven by AI, forcing them to prioritize developer well-being over continuous security intake.","webCardHtml":"\u003cp\u003eThe curl project, whose libcurl library is embedded in countless devices and software, will pause vulnerability report submissions on HackerOne from July 1 to August 3, 2026. Lead developer Daniel Stenberg said the number of high-quality reports has reached 4-5 times the 2024 level and about double the 2025 level, with more than one report arriving per day. The backlog has grown as response times lag. The release of curl 8.22.0 is pushed back two weeks to September 2 to give developers time to clear the queue after the break. Non-vulnerability bug reports and code suggestions via GitHub remain open. Paid support customers will see no interruption.\u003c/p\u003e","blueskyPost":"Curl project declares 'summer of bliss' vacation, halting vulnerability reports from July 1 to August 3. Lead dev says report volume hit 4-5x 2024 levels. Release of curl 8.22.0 delayed to Sept 2.","twitterPost":"Curl project declares 'summer of bliss' vacation, halting vulnerability reports July 1-Aug 3. Lead dev says report volume hit 4-5x 2024 levels. curl 8.22.0 delayed to Sept 2.","threadsPost":null,"newsletterBlurb":"The curl project will stop accepting vulnerability reports from July 1 to August 3, calling the period 'curl summer of bliss.' Lead developer Daniel Stenberg said high-quality reports have surged to 4-5 times 2024 levels, causing a backlog. The release of curl 8.22.0 is postponed to September 2 to handle the queue after the break.","attributionJson":"[{\"source\":\"GIGAZINE\",\"url\":\"https://gigazine.net/news/20260616-curl-summer-of-bliss/\",\"title\":\"Open-source curl declares an unusual 'summer break', stops accepting vulnerability reports in July to reduce developer burden\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4204,"outputTokens":598,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1781607482,"createdAt":"2026-06-16T10:46:21.000Z","publishedAt":"2026-06-16T10:49:57.000Z","updatedAt":"2026-06-16T10:49:57.000Z"},"cluster":{"id":"c_78678e9b1b178186f6e7d48c","canonicalTitle":"OSSのcurlが異例の「夏休み」を宣言、7月中は脆弱性報告を受け付けず開発者の負担軽減へ","representativeArticleId":"a_0a5b97cc8f39cdca2ba06a74","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[\"curl\"],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-06-16T10:00:00.000Z","lastSeenAt":"2026-06-16T10:00:00.000Z","updatedAt":"2026-06-16T10:49:57.000Z"},"attribution":[{"source":"GIGAZINE","url":"https://gigazine.net/news/20260616-curl-summer-of-bliss/","title":"OSSのcurlが異例の「夏休み」を宣言、7月中は脆弱性報告を受け付けず開発者の負担軽減へ"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":["curl"],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":["The curl project will stop accepting vulnerability reports on HackerOne from July 1 to August 3, 2026, calling the period 'curl summer of bliss.'","Lead developer Daniel Stenberg said high-quality vulnerability reports have surged to 4-5 times the 2024 level and about double the 2025 level, with more than one report arriving per day.","The release of curl 8.22.0 is postponed two weeks to September 2, 2026, to allow developers to clear the backlog after the break.","Non-vulnerability bug reports and code suggestions via GitHub remain open during the pause.","Paid support customers will see no interruption in service during the vacation period."]}