cURL's maintainer, Daniel Stenberg, has shut down the project's bug bounty program due to an overwhelming number of low-quality, AI-generated submissions. He hopes this will encourage more meaningful bug reports while maintaining public accountability for poor submissions.

Daniel Stenberg, lead of the curl project, expressed frustration over the increasing number of AI-generated vulnerability reports, labeling them as “AI slop” and proposing stricter verification measures for submissions. He noted that no valid security reports have been generated with AI assistance, highlighting a recent problematic report that lacked relevance and accuracy, which ultimately led to its closure.