Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'

From October 26, only high and critical cases stay private as project seeks help sharing the workload