curl
Security Risk Profile
40
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 93 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 21, 2005 to present
93
Total CVEs
16
Critical+High
1
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
40/100
medium
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
3High
13Medium
19Low
4Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
6
2
Race Condition
4
3
Infoleak
3
4
SSRF
2
5
Path Traversal
2
Most Affected Products
1. curl libcurl167
2. curl curl131
3. haxx curl22
4. libcurl libcurl21
5. ubuntu/curl18
Recent Vulnerabilities
See more →CVE-2026-12064
CVSS 7.5high
proto-default skips SSH verification
7/3/2026
https://seclists.org/oss-sec/2026/q2/1012
unknown
[SECURITY ADVISORIES] for curl 8.21.0
6/24/2026🔧 No Patch
CVE-2026-49129
CVSS 6.9medium
Music Player Daemon < 0.24.11 SSRF via CurlInputPlugin
5/28/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/678
unknown
Sv: Coordinated Disclosuin the LLM Age
5/24/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/675
unknown
Coordinated Disclosuin the LLM Age
5/23/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/667
unknown
Sv: Coordinated Disclosuin the LLM Age
5/22/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/541
unknown
Sv: Coordinated Disclosuin the LLM Age
5/15/2026🔧 No Patch
CVE-2026-7168
CVSS 5.3EPSS 0%medium
cross-proxy Digest auth state leak
4/29/2026
CVE-2026-6276
CVSS 7.5high
stale custom cookie host causes cookie leak
4/29/2026
CVE-2026-7009
CVSS 5.3EPSS 0%medium
OCSP stapling bypass with Apple SecTrust
4/29/2026
Monitor curl in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.