The open-source project Curl has introduced a new vulnerability disclosure policy, where low and medium security reports will be publicly disclosed in the issue tracker, rather than being privately reported. This approach treats these vulnerabilities like regular bugs, aiming to reduce the pressure on open-source projects that are overwhelmed with security reports. By adopting this policy, Curl is promoting a more transparent and efficient way of handling vulnerabilities, and it is suggested that other open-source projects should follow suit, as public disclosure can actually help to improve security by allowing for quicker fixes and reducing the risk of exploitation.