---
title: "Do excellent vulnerability reports"
url: https://daily.dev/posts/do-excellent-vulnerability-reports-okekhmxxc
source_url: https://daniel.haxx.se/blog/2026/06/29/do-excellent-vulnerability-reports
type: article
source: "daniel.haxx.se"
published: 2026-06-29T07:49:28.090Z
updated: 2026-06-29T08:20:31.672Z
tags: ["security", "open-source", "curl"]
reading_time: 7
upvotes: 2
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Do excellent vulnerability reports

**[daniel.haxx.se](https://daily.dev/sources/danielhaxxse)** · 7 min read · 2 upvotes · 0 comments

## Summary

A guide from the curl maintainer on how to write high-quality vulnerability reports to open source projects. Key recommendations include: writing a clear human-authored intro paragraph explaining the problem, providing a standalone reproducer, submitting a patch if possible, specifying affected versions, following the project's preferred submission channel, and remaining available for collaboration throughout the process. The guide also covers how security advisories are written and emphasizes respecting the limited bandwidth of volunteer maintainers.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://daniel.haxx.se/blog/2026/06/29/do-excellent-vulnerability-reports>

## Similar posts on daily.dev

- [How to Write a Vulnerability Report That Gets Paid -Not Rejected](https://daily.dev/posts/how-to-write-a-vulnerability-report-that-gets-paid--not-rejected-ky08gpi8g) · InfoSec Write-ups · 0 upvotes · 0 comments
- [From suspicion to published curl CVE](https://daily.dev/posts/from-suspicion-to-published-curl-cve-sxd4fff7d) · daniel.haxx.se · 2 upvotes · 0 comments
- [Vulnerability Reports Are Not Special Anymore](https://daily.dev/posts/vulnerability-reports-are-not-special-anymore-dve3hacva) · Filippo Valsorda · 9 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#curl](https://daily.dev/tags/curl)

[View this post on daily.dev](https://daily.dev/posts/do-excellent-vulnerability-reports-okekhmxxc)