# How to submit effective vulnerability reports to open-source projects

DevFeed: [How to submit effective vulnerability reports to open-source projects](<https://devfeed.tech/articles/do-excellent-vulnerability-reports-18895.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/06/29/do-excellent-vulnerability-reports/>)

Author: Daniel Stenberg

Published: 2026-06-29T07:47:43Z

Content type: tutorial

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Security](<https://devfeed.tech/topics/security.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [cve](<https://devfeed.tech/tags/cve.md>), [guide](<https://devfeed.tech/tags/guide.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

This guide explains how to submit effective vulnerability reports to open-source projects, drawing on curl maintainers' experience with more than one thousand reports. It emphasizes describing the real security impact, understanding the software's documented behavior and limitations, and making reports easy for maintainers to handle.

## Source excerpt

Over the years, we have received, read and handled way over one thousand vulnerability reports filed against curl. We have seen most kinds. It is time for me to try to help future reporters by providing a short guide on how to submit a truly excellent vulnerability report to an Open Source project. Researchers We ... Continue reading Do excellent vulnerability reports ->