Browse CVEs

MEDIUM 5.3 CVE-2025-15079 When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts … Curl 8.18.0+ Fix from $1,6002026-01-08 MEDIUM 5.3 CVE-2025-14524 When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, … Curl 8.18.0+ Fix from $1,6002026-01-08 MEDIUM 5.3 CVE-2025-14819 When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally … Curl 8.18.0+ Fix from $1,6002026-01-08 MEDIUM 6.3 CVE-2025-14017 When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally a… Curl 8.18.0+ Fix from $1,6002026-01-08 MEDIUM 5.9 CVE-2025-13034 When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey` with the curl tool,curl should check the public key of the server certif… Curl 8.18.0+ Fix from $1,6002026-01-08 HIGH 7.5 CVE-2025-9086 1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak with `http://target` (same … Curl 8.16.0+ Fix from $1,9502025-09-12 MEDIUM 5.3 CVE-2025-10148 curl's websocket code did not update the 32 bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask tha… Curl 8.16.0+ Fix from $1,6002025-09-12 HIGH 7.5 CVE-2025-5399 Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless… Curl 8.14.1+ Fix from $1,9502025-06-07 MEDIUM 6.5 CVE-2025-4947 libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefo… Curl 8.14.0+ Fix from $1,6002025-05-28 HIGH 7.3 CVE-2025-0725 When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zl… Curl 8.12.0+ Fix from $1,9502025-02-05 HIGH 7.0 CVE-2025-0665 libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resol… Curl No fix yet Fix from $1,9502025-02-05 MEDIUM 6.5 CVE-2024-9681 When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than oth… Curl 8.11.0+ Fix from $1,6002024-11-06 MEDIUM 6.5 CVE-2024-8096 When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is v… Curl 8.10.0+ Fix from $1,6002024-09-11 MEDIUM 6.5 CVE-2024-7264EPSS 17% libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect fiel… Libcurl 8.9.1+ Fix from $1,6002024-07-31 HIGH 7.5 CVE-2024-6197 libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortu… Libcurl 8.9.0+ Fix from $1,9502024-07-24 HIGH 8.6 CVE-2024-2398EPSS 36% When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed… Curl 8.7.0 / 12.7.6+ Fix from $1,9502024-03-27 MEDIUM 6.5 CVE-2024-2466 libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would … Curl 8.7.0 / 12.7.6+ Fix from $1,6002024-03-27 MEDIUM 6.3 CVE-2024-2379 libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad c… Curl 12.7.6 / 13.6.8+ Fix from $1,6002024-03-27 MEDIUM 5.3 CVE-2024-0853 curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (*OCSP stapling*) test failed. A subsequent trans… Curl No fix yet Fix from $1,6002024-02-03 MEDIUM 5.3 CVE-2023-46219 When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware o… Curl 8.5.0+ Fix from $1,6002023-12-12 MEDIUM 6.5 CVE-2023-46218 This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or p… Curl after 8.4.0 Fix from $1,6002023-12-07 HIGH 7.5 CVE-2023-38039EPSS 62% When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl d… Curl 8.3.0 / 10.0.17763.5122+ Fix from $1,9502023-09-15 MEDIUM 5.9 CVE-2023-28321 An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject … Curl 8.1.0+ Fix from $1,6002023-05-26 MEDIUM 5.9 CVE-2023-28320 A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at… Curl 8.1.0 / 11.7.9+ Fix from $1,6002023-05-26 HIGH 7.5 CVE-2023-28319 A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. … Curl 8.1.0 / 11.7.9+ Fix from $1,9502023-05-26 HIGH 8.8 CVE-2023-27533 A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously c… Curl after 7.881 Fix from $1,9502023-03-30 HIGH 8.8 CVE-2023-27534 A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix … Curl after 7.88.1 Fix from $1,9502023-03-30 MEDIUM 5.9 CVE-2023-27537 A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considera… Libcurl No fix yet Fix from $1,6002023-03-30 CRITICAL 9.1 CVE-2023-23914 A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs a… Curl 7.88.0 / 8.2.12+ Fix from $2,3002023-02-23 MEDIUM 6.5 CVE-2023-23915 A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly whe… Curl 7.88.0 / 8.2.12+ Fix from $1,6002023-02-23