potential vulnerabilities when combining libraries in a new client?

[Mark Oates]

I'm curious about the potential issues that may occur when combining the bitcoin library with another library.  Say for example I wanted to create a client that combined the current bitcoin c++ code with cURL.  When the two libraries are combined into an executable, could that open a potential exploitable hole?  How would a library like cURL need to be evaluated for these pitfalls?