Looks like cURL team is not in the list of CNAs: https://www.cve.org/PartnerInformation/ListofPartners https://www.cve.org/PartnerInformation/ListofPartners - m

Looks like cURL team is not in the list of CNAs: https://www.cve.org/PartnerInformation/ListofPartners https://www.cve.org/PartnerInformation/ListofPartners - maybe they should be. The measure of the last resort for bad CVEs is https://cveform.mitre.org/ https://cveform.mitre.org/ as I understand.