curl version bump security