[sr-dev] CURL vulnerability