<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/high-quality-chaos-gkbh5roqh" -->

---
title: High-Quality Chaos | daily.dev
description: Daniel Stenberg, curl&#x27;s maintainer, describes a new era of AI-assisted security research affecting open source projects. After shutting down curl&#x27;s bug bounty...
canonical: https://daily.dev/posts/high-quality-chaos-gkbh5roqh
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: High-Quality Chaos | daily.dev
og:description: Daniel Stenberg, curl&#x27;s maintainer, describes a new era of AI-assisted security research affecting open source projects. After shutting down curl&#x27;s bug bounty...
og:url: https://daily.dev/posts/high-quality-chaos-gkbh5roqh
og:image: https://api.daily.dev/og/posts/gKbh5rOQh.png
og:image:alt: High-Quality Chaos
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# High-Quality Chaos

**[daniel.haxx.se](https://daily.dev/sources/danielhaxxse)** · 4 min read · 3 upvotes · 0 comments

## Summary

Daniel Stenberg, curl's maintainer, describes a new era of AI-assisted security research affecting open source projects. After shutting down curl's bug bounty due to low-quality AI-generated spam submissions, the project moved back to HackerOne in March 2026. The result: report volume doubled again, but quality is now high — confirmed vulnerability rates returned to ~15-16%. Nearly every report now shows signs of AI assistance. A Mastodon poll confirmed the same trend across dozens of major open source projects including Linux kernel, Firefox, git, Django, and many others. Curl alone may publish close to 50 CVEs in 2026, a record. The concern is that maintainer capacity won't keep pace with the flood of valid reports, and that bad actors can use the same AI tools to find vulnerabilities before patches are deployed.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://daniel.haxx.se/blog/2026/04/22/high-quality-chaos/>

## Similar posts on daily.dev

- [cURL’s Daniel Stenberg: AI slop is DDoSing open source](https://daily.dev/posts/curl-s-daniel-stenberg-ai-slop-is-ddosing-open-source-7e4x0vont) · The New Stack · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#curl](https://daily.dev/tags/curl)

[View this post on daily.dev](https://daily.dev/posts/high-quality-chaos-gkbh5roqh)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"High-Quality Chaos","url":"https://daily.dev/posts/high-quality-chaos-gkbh5roqh","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/high-quality-chaos-gkbh5roqh"},"datePublished":"2026-04-22T11:49:32.999Z","dateModified":"2026-04-22T11:49:57.490Z","description":"Daniel Stenberg, curl's maintainer, describes a new era of AI-assisted security research affecting open source projects. After shutting down curl's bug bounty...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8b6308918d5c4dabc422f27e9b144db8?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8b6308918d5c4dabc422f27e9b144db8?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"daniel.haxx.se","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"daniel.haxx.se","logo":"https://media.daily.dev/image/upload/s--us7Mqjk6--/f_auto/v1714798819/logos/danielhaxxse","url":"https://daily.dev/sources/danielhaxxse"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/high-quality-chaos-gkbh5roqh","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,curl","timeRequired":"PT4M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"daniel.haxx.se","item":"https://daily.dev/sources/danielhaxxse"},{"@type":"ListItem","position":3,"name":"High-Quality Chaos"}]}
```

