One not too surprising effect of announcing *18* CVEs in one go for #curl tomorrow, is that then all of a sudden the second newest release suddenly contains eighteen known vulnerabilities.
Going back further, the most vulnerable curl release through all time contains 101 known vulnerabilities by tomorrow. That's curl 7.34.0, released in December 2013...