wrong reuse for different services

wrong reuse of HTTP Negotiate connection

wrong proxy connection reuse with credentials

bad reuse of HTTP Negotiate connection

QUIC certificate check skip with wolfSSL

HSTS subdomain overwrites parent cache entry

OCSP stapling bypass with GnuTLS

ASN.1 date parser overread

TLS certificate check bypass with mbedTLS

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible

broken TLS options for threaded LDAPS

QUIC certificate check bypass with wolfSSL

proxy credentials leak over redirect-to proxy

connection reuse ignores TLS requirement

No QUIC certificate pinning with GnuTLS

cross-proxy Digest auth state leak

OCSP stapling bypass with Apple SecTrust

netrc credential leak with reused proxy connection

token leak with redirect and netrc

libssh global known_hosts override

OpenSSL partial chain store policy bypass

bearer token leak on cross-protocol redirect

predictable WebSocket mask

OCSP verification bypass with TLS session reuse

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should…

No QUIC certificate pinning with wolfSSL

wcurl path traversal with percent-encoded slashes

missing SFTP host verification with wolfSSH

macidn punycode buffer overread