The curl project will not accept or otherwise handle any vulnerability reports during the month of July 2026. We call it the curl summer of bliss.
curl’s submission form on Hackerone will be paused starting July 1, 2026.
Summer of bliss starts: July 1, 2026. 00:00 CEST
Submissions resume: August 3 2026. 09:00 CEST
The security email address will also be a dead end, as we will not process or otherwise care about security or vulnerability reports sent to us that way either.
Whatever issue you find that you feel a need to report to the curl project during this month has to wait. curl’s Hackerone form opens for submissions again on Monday August 3.
We do not accept vulnerability reports over email in general, and this fact remains during and after our vacation.
Vacation for real
The curl maintainers will use this time of less pressure to take in some extra air and to enjoy the summer. Maybe stroll outside a bit more. Breath. Some of us may spend some of this time to see other places.
We may get some extra time to spend on fixing bugs or working on new code. Fun stuff!
Side-effects
As a direct side-effect of this summer of bliss, to allow us some more time to handle the issues that might have piled up for us in early August, we also push the release date of 8.22.0 two weeks into the future. Now scheduled to happen on September 2, 2026.
Vulnerability rate
As previously mentioned, we have been under a huge pressure for the last four months or so. Now we need some rest. We do not expect this deluge to be over.
GitHub
curl’s issue and pull-request trackers on GitHub remain open and active like normal.
You too?
If you and your Open Source projects also want to participate in the summer of bliss 2026: just do it and let us know! I would of course encourage you to do so. To take care of yourself as a top priority.
The bad guys won’t rest
Probably not. But we will.
But what if there is an emergency
Then we get to read about it in August. Or you get a support contract and we get to read about it earlier.
Contracts excluded
Everyone with a paid support contracts will of course still get full and appropriate service even during this period.
Credits
The ice cream image was made by fotografierende from Pixabay
Discussed
On hacker news.
Prioritising your sanity and significant others over us and blogging about it makes you a hero and paragon how programming should be. I am taking breaks more often as well recently, it’s okay to be idle sometimes.
Enjoy your well deserved vacation!
Make sure you don’t just take time off from programming but really stop thinking about the project constantly for a while too.
Can’t say I’m anything other than supportive of this concept.
Hot Curl Summer 🙂
Nice approach to surviving noise!
This feels like a put your oxygen mask on first situation. Taking care of yourself is important.
Enjoy your well-deserved reduced-stress time off!
Ha! Now *this* is one heck of a smart move…
Those outside of the curl dev circles can still run tests and write reports during that time if inclined to, preferably sane ones.
The devs deserve this kind of break for a project that runs on just about anything network connected.
Hats off to a healthy attitude. Have a nice holiday.
Happy, blissful vaccation time to you all, even if you are not a domain-, subject matter expert (SME)¹ or curl developer.
Most LLMs approve, paraphrasing from prompting mulitple LLMs (using a LLM to prompt LLMs for bias is science, btw), they agree on: »Domain experts should not be tasked with administrative duties as their specialized knowledge is better utilized in providing insights and solving complex problems within their area of expertise. This ensures that their skills are focused on enhancing decision-making and strategic initiatives rather than on administrative functions.«
Which is a established fact since more than 50 years².
LLMs also agree on »the curl Summer of Bliss community/mentorship event (…) will not negatively affect curl’s security; it’s intended to strengthen the project.« Further prompts reveal, most LLMs start to mistake it for Google Summer of Code… 🙂
¹) https://en.wikipedia.org/wiki/Subject-matter_expert#Domain_expert_(software)
²) https://en.wikipedia.org/wiki/Rapid_application_development#Disadvantages
Well deserved!
Take care of yourself, your family, loved ones and chill with the summer breeze. Connect with nature, sun, water, …
Yeah, happy for you, Daniel! : )
I highly appreciate your effort and thank you for your courage to make this step and with it, you set a statement!
Nice holiday!
I hope you and your team have a wonderful, restful and generally relaxing ‘holiday’. Have a good time and do something nice – you’ve earned it =)