curl moves low-severity flaws to public GitHub to survive report avalanche

curl maintainer Daniel Stenberg said that from October 26, low and medium-severity vulnerability reports will be filed publicly in the project's GitHub repository, with private handling reserved for high and critical flaws. He cited an "avalanche" of reports, many AI-generated, noting that over 90% of submissions are assessed below HIGH and key maintainers are overloaded.

• From October 26, low and medium curl flaws are filed publicly on GitHub
• Private handling remains only for high and critical vulnerabilities
• Over 90% of vulnerability submissions are rated below HIGH
• curl previously shut its bug bounty program amid AI-generated reports