LI
Product
Libcurl
61
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 15Medium 10Low 3
Watch
Add Libcurl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38546 | 3.7 | Oct 18 | This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met Affected: 7.9.1 before 8.4.0 |
| CVE-2021-22924 | 3.7 | Aug 5 | libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching… Affected: 7.10.4 before 7.77.0 |
| CVE-2021-22890 | 3.7 | Apr 1 | curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets Affected: 7.63.0 through 7.75.0 |
Showing 3
