CU
Product
curl
101
CVEs
0
On KEV
9.8
Max CVSS
24
New 30D
Severity mix
Critical 13High 33Medium 29Low 6
Watch
Add curl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38546 | 3.7 | Oct 18 | This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met Affected: 8.4.0 before 8.4.0 |
| CVE-2019-5435 | 3.7 | May 28 | An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1 Affected: Fixed in 7.65.0 |
| CVE-2024-2004 | 3.5 | Mar 27 | Usage of disabled protocol Affected: 8.6.0 through 8.6.0; 8.5.0 through 8.5.0; 8.4.0 through 8.4.0; 8.3.0 through 8.3.0; 8.2.1 through 8.2.1; 8.2.0 through 8.2.0; +10 more |
| CVE-2025-0167 | 3.4 | Feb 5 | netrc and default credential leak Affected: 8.11.1 through 8.11.1; 8.11.0 through 8.11.0; 8.10.1 through 8.10.1; 8.10.0 through 8.10.0; 8.9.1 through 8.9.1; 8.9.0 through 8.9.0; +31 more |
| CVE-2024-11053 | 3.4 | Dec 11 | netrc and redirect credential leak Affected: 8.11.0 through 8.11.0; 8.10.1 through 8.10.1; 8.10.0 through 8.10.0; 8.9.1 through 8.9.1; 8.9.0 through 8.9.0; 8.8.0 through 8.8.0; +34 more |
| CVE-2025-15224 | 3.1 | Jan 8 | libssh key passphrase bypass without agent set Affected: 7.58.0 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.18.0; c92d2e14cfb0db662f958effd2ac86f995cf1b5a before 16d5f2a5660c61cc27bd5f1c7f512391d1c927aa; 8.17.0; 8.16.0; +34 more |
Showing 6