curl: a CVE dispute
curl maintainer Daniel Stenberg details a dispute over a CVE assigned to the curl project.
Daniel Stenberg, lead maintainer of curl, published a post describing a dispute over a CVE affecting the project. The piece covers the vulnerability disclosure and CVE assignment process rather than a new exploitable flaw. Given curl's ubiquity, the process discussion is relevant to defenders tracking CVE quality, but no immediate risk is described.
28