On 24 August the founder of curl said Anthropic's and OpenAI's code scanners had nothing left to report. The startup AISLE then filed 29 reports, and six shipped as curl vulnerabilities on 2 September. All six carried a low severity rating, and the curl team confirmed them within days.