> with almost 150 CVEs since its inception. Just now for the 25nd aniversary half a dozen were added to the list. These ones? 141. We are not aware of any

> with almost 150 CVEs since its inception. Just now for the 25nd aniversary half a dozen were added to the list. These ones? 141. We are not aware of any exploit of this flaw. Severity: Low 140. We are not aware of any exploit of this flaw. Severity: Low 139. We are not aware of any exploit of this flaw. Severity: Low 138. We are not aware of any exploit of this flaw. Severity: Medium 137. We are not aware of any exploit of this flaw. Severity: Low ... > The dependency list is an absolute security nightmare: Is it the thirteen items on this list: https://curl.se/docs/libs.html https://curl.se/docs/libs.html ? "You can build curl without them" > Why is anyone trusting software that needs this many security updates for such a comparably trivial task? At 148299 lines of C, perhaps it has more uses than you give it credit for?