Aisle AI Discovers 24 curl Vulnerabilities After Major Code Analysis Tools Found None

European security firm Aisle has uncovered 24 previously unknown vulnerabilities in the widely-used curl library, demonstrating the breadth of blind spots that persist even after sophisticated AI vulnerability detection tools complete their analysis. The 24 CVEs were split across curl 8.22.0 (6 vulnerabilities) and curl 8.23.0 (18 vulnerabilities), with Aisle responsible for identifying 18 of the latter—75% of all security issues addressed in the October 2026 release. Daniel Stenberg, curl's lead maintainer, stated that Aisle has discovered more curl vulnerabilities in roughly one year than any other group or individual in the library's entire history, with a total of 35 CVEs and 160 additional bug fixes identified through the ongoing partnership.