AI Is Finding More Bugs Than Open-Source Teams Can Fight Off

In 2025, Daniel Stenberg, the chief maintainer of cURL, an open-source software tool that transfers data using URLs, received 181 notifications of bugs or vulnerabilities across the codebase he oversees with a small team of six other volunteers.

That was roughly as many as the previous two years combined. “Last year was quite intense during periods,” Stenberg said from his office in Sweden.

With hindsight, that 2025 bump — which Stenberg attributed to the rise of AI tools like OpenAI’s ChatGPT and Anthropic PBC’s Claude, and the ease with which bug report forms could be filled out with ...