Latest vulnerabilities for "curl"

curllibssh key passphrase bypass without agent set

Risk 18

Severity

3.1

First published (updated )

CVE-2025-15224

Apple iOSbearer token leak on cross-protocol redirect

Risk 34

Severity

5.3

First published (updated )

CVE-2025-14524

oss-sec[ADVISORY] curl CVE-2025-14819: OpenSSL partial chain stopolicy bypass

First published (updated )

https://seclists.org/oss-sec/2026/q1/34

oss-sec[ADVISORY] curl CVE-2025-14017: broken TLS options for thaded LDAPS

First published (updated )

https://seclists.org/oss-sec/2026/q1/32

oss-sec[ADVISORY] curl CVE-2025-13034: No QUIC certificate pinning with GnuTLS

First published (updated )

https://seclists.org/oss-sec/2026/q1/31

curl1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or other…

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2394750

How to deal with Curl vulnerabilities in Microsoft products

First published (updated )

Social

[SECURITY ADVISORY] curl: CVE-2025-0725: gzip integer overflow

First published (updated )

https://seclists.org/oss-sec/2025/q1/108

The RegisterOracle emits 603 patches, names one it wants you to worry about soon

Exploited

First published (updated )

News

The Register

curl curlWhen asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak t…

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2331191

[SECURITY ADVISORY] curl: CVE-2024-2466: TLS certificate check bypass with mbedTLS

First published (updated )

https://seclists.org/oss-sec/2024/q1/256

[SECURITY ADVISORY] curl: CVE-2024-2398: HTTP/2 push headers memory-leak

First published (updated )

https://seclists.org/oss-sec/2024/q1/255

[SECURITY ADVISORY] curl: CVE-2024-2379: QUIC certificate check bypass with wolfSSL

First published (updated )

https://seclists.org/oss-sec/2024/q1/254

[SECURITY ADVISORY] curl: CVE-2024-2004: Usage of disabled protocol

First published (updated )

https://seclists.org/oss-sec/2024/q1/253

[SECURITY ADVISORY] curl: CVE-2024-0853 : OCSP verification bypass with TLS session reuse

First published (updated )

https://seclists.org/oss-sec/2024/q1/73

curl curlOut-of-bounds Read, Buffer Overflow

Risk 88

Severity

9.8

First published (updated )

CVE-2023-52071

curl curlcURL and libcurl Vulnerability Affecting Cisco Products: October 2023

Risk 32

Severity

7

First published (updated )

Advisory

cisco-sa-curl-libcurl-D9ds39cV

Nasty bug discovered in widely used Linux utility curl, and patches already rolled out

First published (updated )

News

There is a curl "severity HIGH security problem" pre-announcement on GitHub

First published (updated )

https://seclists.org/oss-sec/2023/q4/48

There is a curl "severity HIGH security problem" pre-announcement on GitHub

First published (updated )

https://seclists.org/oss-sec/2023/q4/47

haxx curlInteger Overflow, Input Validation

Risk 19

Severity

3.3

First published (updated )

CVE-2020-19909

Apple macOSRace Condition

Risk 37

Severity

5.9

First published (updated )

CVE-2023-28320

Apple macOSUse After Free, Race Condition

Risk 46

Severity

7.5

First published (updated )

CVE-2023-28319

IBM Cloud Pak for Business AutomationcURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain imple…

Risk 45

Severity

7.5

First published (updated )

CVE-2023-23916

Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …

Risk 70

Severity

9.1

First published (updated )

CVE-2023-23914

Php Curl Class Project Php Curl ClassXSS

Risk 38

Severity

6.1

First published (updated )

CVE-2021-30134

Microsoft Windows 10Use After Free, Buffer Overflow, Input Validation

Risk 38

Severity

5.9

First published (updated )

CVE-2022-43552

Splunk Universal Forwardercurl. Multiple issues were addressed by updating to curl version 7.86.0.

Risk 39

Severity

6.5

First published (updated )

CVE-2022-35260

Splunk Universal ForwarderInput Validation

Risk 23

Severity

4.3

First published (updated )

CVE-2022-32205

Splunk Universal ForwarderA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `-…

Risk 59

Severity

8.1

First published (updated )

CVE-2022-27778

Trending

Versions

curllibssh key passphrase bypass without agent set

Apple iOSbearer token leak on cross-protocol redirect

oss-sec[ADVISORY] curl CVE-2025-14819: OpenSSL partial chain stopolicy bypass

oss-sec[ADVISORY] curl CVE-2025-14017: broken TLS options for thaded LDAPS

oss-sec[ADVISORY] curl CVE-2025-13034: No QUIC certificate pinning with GnuTLS

Don't miss critical vulnerabilities

curl1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or other…

How to deal with Curl vulnerabilities in Microsoft products

[SECURITY ADVISORY] curl: CVE-2025-0725: gzip integer overflow

The RegisterOracle emits 603 patches, names one it wants you to worry about soon

curl curlWhen asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak t…

Don't miss critical vulnerabilities

[SECURITY ADVISORY] curl: CVE-2024-2466: TLS certificate check bypass with mbedTLS

[SECURITY ADVISORY] curl: CVE-2024-2398: HTTP/2 push headers memory-leak

[SECURITY ADVISORY] curl: CVE-2024-2379: QUIC certificate check bypass with wolfSSL

[SECURITY ADVISORY] curl: CVE-2024-2004: Usage of disabled protocol

[SECURITY ADVISORY] curl: CVE-2024-0853 : OCSP verification bypass with TLS session reuse

Don't miss critical vulnerabilities

curl curlOut-of-bounds Read, Buffer Overflow

curl curlcURL and libcurl Vulnerability Affecting Cisco Products: October 2023

Nasty bug discovered in widely used Linux utility curl, and patches already rolled out

There is a curl "severity HIGH security problem" pre-announcement on GitHub

There is a curl "severity HIGH security problem" pre-announcement on GitHub

Don't miss critical vulnerabilities

haxx curlInteger Overflow, Input Validation

Apple macOSRace Condition

Apple macOSUse After Free, Race Condition

IBM Cloud Pak for Business AutomationcURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain imple…

Splunk Universal ForwarderUsing its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text …

Don't miss critical vulnerabilities

Php Curl Class Project Php Curl ClassXSS

Microsoft Windows 10Use After Free, Buffer Overflow, Input Validation

Splunk Universal Forwardercurl. Multiple issues were addressed by updating to curl version 7.86.0.

Splunk Universal ForwarderInput Validation

Splunk Universal ForwarderA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `-…

Don't miss critical vulnerabilities

Company

Resources

Contact