curl Project Pauses Vulnerability Reports for “Summer of Bliss”

The lead maintainer of the curl project announced a temporary halt in accepting vulnerability reports for the period July 1, 2026 (00:00 CEST) through August 3, 2026 (09:00 CEST), including submissions via HackerOne or email. The pause is intended as a scheduled rest rather than a response to a security incident, and it also shifts the planned release of version 8.22.0 to September 2, 2026. While urgent issues may still be handled earlier for companies with paid support contracts, other reports will be deferred, which matters for organizations relying on fast disclosure handling.