curl / Mailing Lists / curl-users / Single Mail

Buy commercial curl support. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder Daniel himself.

2026 State of VEX from OpenSSF blog mentions curl

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

From: Dick Brooks via curl-users <curl-users_at_lists.haxx.se>
Date: Fri, 9 Jan 2026 08:33:32 -0500

The OpenSSF VEX blog posting is accessible in the LinkedIn SBOM SIG
implementers community, along with my comments regarding the curl comment.

"* Reducing False Positives: Microsoft reports that common vulnerabilities
in libraries like curl generate hundreds of unnecessary support tickets. VEX
could stop those calls before they happen."

https://www.linkedin.com/groups/13274064/

Thanks,

Dick Brooks

Active Member of the CISA Critical Manufacturing Sector,

Sector Coordinating Council - A Public-Private Partnership

Lifetime IEEE Member

<https://reliableenergyanalytics.com/products> Never trust software, always
verify and report! T

Risk always exists, but trust must be earned and awarded.T

<https://businesscyberguardian.com/> https://businesscyberguardian.com/

Email: dick_at_businesscyberguardian.com

Tel: +1 978-696-1788

-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-users
Etiquette:   https://curl.se/mail/etiquette.html

(image/png attachment: image007.png)

(image/png attachment: image008.png)

(image/png attachment: image009.png)

Received on 2026-01-09

This message: [ Message body ]
Next message: Michael Newman via curl-users: "Curl timing confusion"
Previous message: Daniel Stenberg via curl-users: "[ADVISORY] curl CVE-2025-15224: libssh key passphrase bypass without agent set"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]