3.4
Low
CVE-2025-0167 When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used…
Description
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| curl 8.11 | 8.11.0 → 8.11.1 | No fix stated |
| curl 8.10 | 8.10.0 → 8.10.1 | No fix stated |
| curl 8.9 | 8.9.0 → 8.9.1 | No fix stated |
| curl | 8.8.0 | No fix stated |
| curl 8.7 | 8.7.0 → 8.7.1 | No fix stated |
| curl | 8.6.0 | No fix stated |
| curl | 8.5.0 | No fix stated |
| curl | 8.4.0 | No fix stated |
| curl | 8.3.0 | No fix stated |
Show the 35 other branches Hide the 35 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| curl 8.2 | 8.2.0 → 8.2.1 | No fix stated |
| curl 8.1 | 8.1.0 → 8.1.2 | No fix stated |
| curl 8.0 | 8.0.0 → 8.0.1 | No fix stated |
| curl 7.88 | 7.88.0 → 7.88.1 | No fix stated |
| curl | 7.87.0 | No fix stated |
| curl | 7.86.0 | No fix stated |
| curl | 7.85.0 | No fix stated |
| curl | 7.84.0 | No fix stated |
| curl 7.83 | 7.83.0 → 7.83.1 | No fix stated |
| curl | 7.82.0 | No fix stated |
| curl | 7.81.0 | No fix stated |
| curl | 7.80.0 | No fix stated |
| curl 7.79 | 7.79.0 → 7.79.1 | No fix stated |
| curl | 7.78.0 | No fix stated |
| curl | 7.77.0 | No fix stated |
| curl 7.76 | 7.76.0 → 7.76.1 | No fix stated |
| RUGGEDCOM RST2428P 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XCH328 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XCM324 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XCM328 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XCM332 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRH334 (24 V DC, 8xFO, CC) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (230 V AC, 12xFO) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (230 V AC, 8xFO) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (24 V DC, 12xFO) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (24 V DC, 8xFO) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (2x230 V AC, 12xFO) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (2x230 V AC, 8xFO) 3.3 | earliest → < 3.3 | 3.3 |
| SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 | earliest → < 3.3 | 3.3 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Other CVEs of curl
The 98 CVEs of curl →
CVE-2026-107929
When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes…
8.1
High
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl
send memory past its send buffer
8.1
High
CVE-2026-94266
libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing…
7.5
High
CVE-2026-94265
When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might…
9.1
Critical