Nah, the last few CVEs curl got were really niche buffer overflows.
He's been very vocal about this. Yeah it's a bug, and usually an easy fix, but they scored like 8 or 9 on CVSS. Which is disproportionate compared to a lot of other 8s or 9s.
I can understand the frustration there.