CU
Product
curl
79
CVEs
0
On KEV
9.8
Max CVSS
24
New 30D
Severity mix
Critical 11High 23Medium 13Low 5
Watch
Add curl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19931 | 9.8 | Sep 6 | Negotiate ambient user conn reuse Affected: 7.64.1 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; 8.21.0 before 8.22.0; 6c6035532383e300c712e4c1cd9fdd749ed5cf59 before 7103a93b05bc69ea98ed9d05d02fa9eeba533f2f; 8.21.0; +34 more |
| CVE-2026-9079 | 9.8 | Jul 3 | stale proxy password leak Affected: 8.8.0 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; d5e83eb745762f48d8fafadc5df5dd3ae8d8941e before 88c7e16cceec816a2df45c899d49b1e85513f193; 8.20.0; 8.19.0; +16 more |
| CVE-2026-8925 | 9.8 | Jul 3 | SASL double-free Affected: 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; ab650379a8c25ca952f651476d25b4cdd77bb3fc before 3da249e1f0716c06644ed3522a37a8bf81808012; 8.20.0; 8.19.0; 8.18.0; +3 more |
| CVE-2026-11856 | 9.8 | Jul 3 | cross-origin Digest auth state leak Affected: 7.10.6 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; 334d78cd18a7310144383929bdcef34ffbf6159b before 5c6b4880357ab3e72967c1c45cae0f96ffabc535; 8.20.0; 8.19.0; +34 more |
| CVE-2026-10536 | 9.8 | Jul 3 | HTTP/2 stream-dependency tree UAF Affected: 7.88.0 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; 71b7e0161032927cdfb4e75ea40f65b8898b3956 before bfbff7852f050232edd3e5ca5c6bf2021c340f5a; 8.20.0; 8.19.0; +31 more |
| CVE-2023-38545 | 9.8 | Oct 18 | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake Affected: 8.4.0 before 8.4.0 |
| CVE-2026-18924 | 9.1 | Sep 6 | HTTP/2 server push UAF Affected: 7.44.0 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; 8.21.0 before 8.22.0; ea7134ac874a66107e54ff93657ac565cf2ec4aa before 90325ff0444cbdff368bda5d26d6405a0bb6ee43; 8.21.0; +34 more |
| CVE-2026-8927 | 9.1 | Jul 3 | env-set cross-proxy Digest auth state leak Affected: 7.12.0 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; fc6eff13b5414caf6edf22d73a3239e074a04216 before 5c225384b8d52c67ce8259c6e4203bc57aacb567; 8.20.0; 8.19.0; +34 more |
| CVE-2026-8926 | 9.1 | Jul 3 | password leak with netrc and user in URL Affected: 8.11.1 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; e9b9bbac22c26cf67316fa8e6c6b9e831af31949 before 4ae1d7cc2643e4773a136395f12bc02fc6867854; 8.20.0; 8.19.0; +10 more |
| CVE-2026-8924 | 9.1 | Jul 3 | trailing dot domain super cookie Affected: 7.46.0 before 8.14.2; 8.15.0 before 8.16.1; 8.17.0 before 8.20.1; e77b5b7453c1e8ccd7ec0816890d98e2f392e465 before 51beed175dbfc37da3113f6acce60c630c070ce8; 8.20.0; 8.19.0; +34 more |
| CVE-2026-11564 | 9.1 | Jul 3 | Native CA trust persist Affected: 8.17.0 before 8.20.1; eefd03c572996e5de4dec4fe295ad6f103e0eefc before d69bfad3fa3daf5e72331f6870667607828d5891; 8.20.0; 8.19.0; 8.18.0; 8.17.0 |
Showing 11