Daniel Stenberg, curl's creator, shares a visualization called 'the mountain' that tracks known vulnerabilities in curl across its entire history from 1998 to 2026. He created a script that renders the vulnerability chart for every month since curl's inception, producing a movie showing how the vulnerability count grew over time. Currently, curl 7.34.0 holds the record with 101 known vulnerabilities. The post also explores a notable drop in vulnerabilities around 2016 following a Cure53 security audit, though the exact cause remains unclear. The data is sourced from curl's vulnerability database and git history, with images assembled into a video using ffmpeg.
13.4K Impressions