HT
Product
https://github.com/curl/curl
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 17Medium 21Low 5
Watch
Add https://github.com/curl/curl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-32221 | 9.8 | Dec 5 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been… Affected: Fixed in 7.86.0 |
| CVE-2022-32207 | 9.8 | Jul 7 | When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final… Affected: Fixed in 7.84.0 |
| CVE-2023-23914 | 9.1 | Feb 23 | A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially Affected: Fixed in 7.88.0 |
| CVE-2021-22945 | 9.1 | Sep 23 | When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in… Affected: curl 7.73.0 to and including 7.78.0 |
Showing 4