CU
Product
curl
79
CVEs
0
On KEV
9.8
Max CVSS
24
New 30D
Severity mix
Critical 11High 23Medium 13Low 5
Watch
Add curl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38546 | 3.7 | Oct 18 | This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met Affected: 8.4.0 before 8.4.0 |
| CVE-2019-5435 | 3.7 | May 28 | An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1 Affected: Fixed in 7.65.0 |
| CVE-2024-2004 | 3.5 | Mar 27 | Usage of disabled protocol Affected: 8.6.0 through 8.6.0; 8.5.0 through 8.5.0; 8.4.0 through 8.4.0; 8.3.0 through 8.3.0; 8.2.1 through 8.2.1; 8.2.0 through 8.2.0; +10 more |
| CVE-2025-0167 | 3.4 | Feb 5 | netrc and default credential leak Affected: 8.11.1 through 8.11.1; 8.11.0 through 8.11.0; 8.10.1 through 8.10.1; 8.10.0 through 8.10.0; 8.9.1 through 8.9.1; 8.9.0 through 8.9.0; +31 more |
| CVE-2024-11053 | 3.4 | Dec 11 | netrc and redirect credential leak Affected: 8.11.0 through 8.11.0; 8.10.1 through 8.10.1; 8.10.0 through 8.10.0; 8.9.1 through 8.9.1; 8.9.0 through 8.9.0; 8.8.0 through 8.8.0; +34 more |
Showing 5