curl 8.23.0 ships 24 security fixes, 18 found with AI scanners
curl 8.23.0 has been released with 24 security fixes. AISLE says its researchers found 18 of them using AI, while the only High-severity issue — a use-after-free in the HTTP/2 upload path — was reported by an Anthropic researcher using Anthropic's new open source scanner. The curl team confirmed it within hours and cut the release cycle from eight weeks to six.
- curl 8.23.0 includes 24 security fixes
- AISLE claims 18 of the 24 were found by its researchers
- The High-severity bug was a use-after-free in HTTP/2 upload
- Release cycle was cut from 8 weeks to 6 to ship the fix
Read next
Security