Reblogged by kornel ("Kornel"):
bagder ("daniel:// stenberg://") wrote:
The curl web site now features this text:
Alert: if you look up curl CVEs in public sources like NVD you will find they use inflated severity levels and CVSS scores. They think they know better and override our assessments. This is a systemic error that we unfortunately cannot fix. Feel free to complain to them - we keep doing it to no use - and consider using our material as the canonical sources for curl issues.