Here[1] is the ongoing list of "curl security problems." Note the several memory safety related issues. The two most recent are: May 26, 2021 CWE-416: U

Here[1] is the ongoing list of "curl security problems." Note the several memory safety related issues. The two most recent are: May 26, 2021 CWE-416: Use After Free May 26, 2021 CWE-457: Use of Uninitialized Variable There are numerous others that follow including out-of-bounds reads, overflows, etc. I can't imagine where you got the idea that this somehow "hasn't ever really been" a problem for curl. [1] https://curl.se/docs/security.html https://curl.se/docs/security.html