After all that hype, AI scanner found one low-severity cURL flaw