#curl may have more CVEs to report than ever, but the less visible trend is that they are all less sever in recent years

This is the graph look with the pending announcements included. Per the year the vulnerabilities were published.