Six curl CVEs after OpenAI and Anthropic came back with zero