I'm all sceptical of AI and the hype but maybe the curl codebase is just quite secure and there are not many vulnerabilities? Not finding a bunch of things doesn't mean the model sucks. That's a stupid conclusion.
Well, this "authenticated user" could be your fucking LLM and this is really concerning. Besides that a single CVE 10 is also very concerning no matter how old the affected version is.
For context, the average salary in Germany was 2700 € in 2024. That's $ 3100.
https://de.statista.com/themen/293/durchschnittseinkommen/#topicOverview