The curl project will pause all vulnerability reporting for the entire month of July 2026 to give maintainers a designated break. Dubbed the summer of bliss, the initiative will disable its HackerOne submission form starting July 1. Normal security disclosures and vulnerability handling will officially resume on August 3.