cURL is also embedded in a lot of applications. An exploit within curl could lead to a vulnerability in the host application.