Security Policy

See SECURITY-PROCESS for full details.

Reporting a Vulnerability

If you have found or just suspect a security problem somewhere in curl or libcurl, report it on HackerOne.

We treat security issues with confidentiality until controlled and disclosed responsibly.