CU
Product
Curl
169
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 33High 57Medium 50Low 11
Watch
Add Curl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13608 | 7.4 | Sep 6 | OpenLDAP SASL authentication bypass Affected: 7.82.0 before 8.22.0 |
| CVE-2026-9547 | 7.4 | Jul 3 | SSH improper host validation Affected: 7.69.0 before 8.21.0 |
| CVE-2026-9080 | 7.3 | Jul 3 | UAF after pause in socket callback Affected: 8.13.0 before 8.21.0 |
| CVE-2025-0725 | 7.3 | Feb 5 | gzip integer overflow Affected: 7.10.5 before 8.12.0 |
| CVE-2016-0755 | 7.3 | Jan 29 | The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to… Affected: through 7.46.0 |
| CVE-2025-0665 | 7.0 | Feb 5 | eventfd double close Affected: 8.11.1 |
| CVE-2016-8617 | 7.0 | Jul 31 | The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME` Affected: before 7.51.0 |