Marked an old curl version as vulnerable.