curl Summary
Latest vulnerabilities published by curl
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Improper Public Key Authentication in cURL Affects Multiple Users
CVE-2025-15224CurlCurl3.1LOWSecurity Flaw in libcurl Affects SSH File Transfers
CVE-2025-15079CurlCurl5.3MEDIUMTLS Vulnerability in libcurl Affects Data Transmission
CVE-2025-14819CurlCurl5.3MEDIUMOAuth2 Bearer Token Vulnerability in cURL
CVE-2025-14524CurlCurl5.3MEDIUMMultithreaded LDAPS Vulnerability in libcurl Affecting Secure Transfers
CVE-2025-14017CurlCurl6.3MEDIUMVulnerability in libcurl's Public Key Verification for QUIC Connections
CVE-2025-13034CurlCurl5.9MEDIUMSecurity Flaw in Curl's SSH Connection Management Affects WolfSSH Backend
CVE-2025-10966CurlCurl4.3MEDIUMWebSocket Vulnerability in curl Affects Multiple Versions
CVE-2025-10148CurlCurl5.3MEDIUMHeap Buffer Vulnerability in cURL Exposing Secure Cookies
CVE-2025-9086CurlCurl7.5HIGHDenial of Service in libcurl's WebSocket Implementation
CVE-2025-5399CurlCurl7.5HIGHServer Certificate Public Key Pinning Flaw in libcurl with wolfSSL for HTTP/3 Connections
CVE-2025-5025CurlCurl4.8MEDIUMCertificate Verification Vulnerability in libcurl Affecting QUIC Connections
CVE-2025-4947CurlCurl6.5MEDIUMInteger Overflow Vulnerability in libcurl Affecting HTTP Response Decompression
CVE-2025-0725CurlCurl7.3HIGHImproper Resource Management in libcurl Affects Multiple Versions
CVE-2025-0665CurlCurlEPSS 11%9.8CRITICALCredential Leakage in Curl Affects Password Management
CVE-2025-0167CurlCurl3.4LOWcurl Leak of Password in HTTP Redirects
CVE-2024-11053CurlCurl3.4LOWBug in curl's HSTS implementation can lead to incorrect cache expiry times
CVE-2024-9681CurlCurl6.5MEDIUMCertificate Status Request TLS extension Failure in curl
CVE-2024-8096CurlCurlHeap Buffer Vulnerability in libcurl's ASN1 Parser
CVE-2024-7264CurlCurl6.5MEDIUMlibcurl's URL API function vulnerable to buffer overflow
CVE-2024-6874CurlCurl4.3MEDIUMlibcurl's ASN1 parser vulnerability can lead to stack memory corruption and crash
CVE-2024-6197CurlCurl7.5HIGHlibcurl Skips Certificate Check for TLS Connections When Using mbedTLS
CVE-2024-2466CurlCurl6.5MEDIUMlibcurl Skips Certificate Verification for QUIC Connections Under Certain Conditions
CVE-2024-2379CurlCurl6.3MEDIUMLibcurl Aborts Server Push Due to Memory Leak
CVE-2024-2398CurlCurl8.6HIGHLow Severity Bug in curl Affects Protocol Selection
CVE-2024-2004CurlCurl3.5LOW