Browse CVEs

CRITICAL 9.8 CVE-2026-9079 libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get … Curl 8.21.0+ Fix from $2,3002026-07-03 CRITICAL 9.1 CVE-2026-8926 When asking curl to use a `.netrc` file to find credentials and at the same time specifying a URL with a username(without a password), like `https://… Curl 8.21.0+ Fix from $2,3002026-07-03 CRITICAL 9.1 CVE-2026-8927 When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentic… Curl 8.21.0+ Fix from $2,3002026-07-03 HIGH 7.5 CVE-2026-8932 libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. li… Curl 8.21.0+ Fix from $1,9502026-07-03 HIGH 7.5 CVE-2026-9545 In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has be… Curl 8.21.0+ Fix from $1,9502026-07-03 HIGH 7.5 CVE-2026-9546 A vulnerability in libcurl caused the HTTP `Referer:` header to persist even when explicitly cleared. While the documentation states that passing NUL… Curl 8.21.0+ Fix from $1,9502026-07-03 HIGH 7.4 CVE-2026-9547 When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently ac… Curl 8.21.0+ Fix from $1,9502026-07-03 HIGH 7.3 CVE-2026-9080 Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts… Curl 8.21.0+ Fix from $1,9502026-07-03 CRITICAL 9.8 CVE-2026-8925 The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making… Curl 8.21.0+ Fix from $2,3002026-07-03 CRITICAL 9.1 CVE-2026-8924 A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an… Curl 8.21.0+ Fix from $2,3002026-07-03 HIGH 8.1 CVE-2026-8286 A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS … Curl 8.21.0+ Fix from $1,9502026-07-03 HIGH 7.5 CVE-2026-12064 When a user invokes curl using a schemeless URL combined with `--proto-default` sftp (or scp), a disconnect occurs between the tool layer and libcurl… Curl 8.21.0+ Fix from $1,9502026-07-03 MEDIUM 6.5 CVE-2026-8458 libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different… Curl 8.20.0+ Fix from $1,6002026-07-03 CRITICAL 9.8 CVE-2026-10536 A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CUR… Curl 8.21.0+ Fix from $2,3002026-07-03 CRITICAL 9.8 CVE-2026-11856 Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication and then changing the origin to a diff… Curl 8.21.0+ Fix from $2,3002026-07-03 CRITICAL 9.1 CVE-2026-11564 libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle th… Curl 8.21.0+ Fix from $2,3002026-07-03 HIGH 7.5 CVE-2026-11352 An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client.… Curl 8.21.0+ Fix from $1,9502026-07-03 HIGH 7.5 CVE-2026-11586 By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a… Curl 8.21.0+ Fix from $1,9502026-07-03 MEDIUM 5.3 CVE-2026-7009 When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server certificate is… Curl 8.20.0+ Fix from $1,6002026-05-13 MEDIUM 5.3 CVE-2026-7168 Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then changing the proxy host to … Curl 8.20.0+ Fix from $1,6002026-05-13 HIGH 7.5 CVE-2026-5773 libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl features a pool of recent connections so that subsequen… Curl 8.20.0+ Fix from $1,9502026-05-13 HIGH 7.5 CVE-2026-6276 Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* b… Curl 8.20.0+ Fix from $1,9502026-05-13 MEDIUM 6.5 CVE-2026-5545 libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one,… Curl 8.20.0+ Fix from $1,6002026-05-13 MEDIUM 5.9 CVE-2026-6253 curl might erroneously pass on credentials for a first proxy to a second proxy. This can happen when the following conditions are true: 1. curl is … Curl 8.20.0+ Fix from $1,6002026-05-13 MEDIUM 5.3 CVE-2026-6429 When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the f… Curl 8.20.0+ Fix from $1,6002026-05-13 MEDIUM 5.9 CVE-2026-4873 A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an in… Curl 8.20.0+ Fix from $1,6002026-05-13 HIGH 7.5 CVE-2026-3805 When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory. Curl 8.19.0+ Fix from $1,9502026-03-11 MEDIUM 6.5 CVE-2026-3784 curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP… Curl 8.18.0+ Fix from $1,6002026-03-11 MEDIUM 5.3 CVE-2026-3783 When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the… Curl 8.19.0+ Fix from $1,6002026-03-11 MEDIUM 6.5 CVE-2026-1965 libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a p… Curl 8.19.0+ Fix from $1,6002026-03-11