HT
Product
https://github.com/curl/curl
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 17Medium 21Low 5
Watch
Add https://github.com/curl/curl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-35252 | 3.7 | Sep 23 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server… Affected: Fixed in curl 7.85.0 |
| CVE-2021-22924 | 3.7 | Aug 5 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching… Affected: curl 7.10.4 to and include curl 7.77.0 |
| CVE-2021-22890 | 3.7 | Apr 1 | curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets Affected: 7.63.0 to and including 7.75.0 |
| CVE-2020-8284 | 3.7 | Dec 14 | A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract… Affected: 7.73.0 and earlier |
| CVE-2021-22898 | 3.1 | Jun 11 | curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content… Affected: 7.7 through 7.76.1 |
Showing 5