We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·Jun 25·5 min read
Aisle Discovers 6 New CVEs in Curl, Including the Oldest Issue Ever Reported
TL;DR
Security vulnerabilities in widely used software like curl can remain undetected for long periods. AISLE utilized its autonomous vulnerability detection capabilities to identify six new Common Vulnerabilities and Exposures (CVEs) in curl.
✦ Why It Matters
Engineers should prioritize updating curl to the latest version to mitigate newly discovered vulnerabilities.
Key Takeaways
- Update curl to version 8.21.0 to address new vulnerabilities.
- Consider using AISLE's detection capabilities for security research.
- Be aware of the challenges in finding vulnerabilities in mature software.
- Monitor for future CVEs in widely used libraries like curl.
Full Summary
Curl is a critical software component that facilitates data transfers across various platforms, running on over 30 billion devices. AISLE, an organization specializing in security research, discovered six new CVEs in curl, including the oldest issue ever reported.
Using its autonomous vulnerability detection capabilities, AISLE identified these vulnerabilities, which were disclosed responsibly to the curl project and addressed in the June 2026 release of curl 8.21.0. This effort followed a previous discovery of 29 valid findings and five CVEs in fall 2025.
The findings underscore the challenges of identifying security issues in mature software, where easy bugs have already been resolved. AISLE's success demonstrates that its approach can outperform other AI models in vulnerability detection, providing a cost-effective solution for security researchers.