Skip to content

Vulnerabilities of n/a https://github.com/curl/curl

Is your version affected?

CVE Summary Score Published
CVE-2022-27782 libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should… 7.5 High Jun 1, 2022
CVE-2022-27775 An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address… 7.5 High Jun 1, 2022
CVE-2022-27781 libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's… 7.5 High Jun 1, 2022
CVE-2022-27774 An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that… 5.7 Medium Jun 1, 2022
CVE-2022-27780 The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL,… 5.3 Medium Jun 1, 2022
CVE-2022-27779 libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing… Not rated Jun 1, 2022
CVE-2022-22576 An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse… 8.1 High May 26, 2022
CVE-2021-22947 When curl >= 7.20.0… 5.9 Medium Sep 29, 2021
CVE-2021-22946 A user can tell curl >= 7.20.0… 7.5 High Sep 29, 2021
CVE-2021-22945 When sending data to an MQTT server,… 9.1 Critical Sep 23, 2021
CVE-2021-22924 libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them… 3.7 Low Aug 5, 2021
CVE-2021-22926 libcurl-using applications can ask for a specific client certificate to be used in a transfer 7.5 High Aug 5, 2021
CVE-2021-22925 curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl 5.3 Medium Aug 5, 2021
CVE-2021-22923 When curl is instructed to get content using the metalink feature, and a user name and password are used to download the… Not rated Aug 5, 2021
CVE-2021-22922 When curl is instructed to download content using the metalink feature, thecontents is verified against a hash… 6.5 Medium Aug 5, 2021
CVE-2021-22897 curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for… 5.3 Medium Jun 11, 2021
CVE-2021-22901 curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when… Not rated Jun 11, 2021
CVE-2021-22898 curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as… 3.1 Low Jun 11, 2021
CVE-2021-22890 curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection… 4.3 Medium Apr 1, 2021
CVE-2021-22876 curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized… 5.3 Medium Apr 1, 2021
CVE-2020-8177 curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead… 7.8 High Dec 14, 2020
CVE-2020-8169 curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial… Not rated Dec 14, 2020
CVE-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient… Not rated Dec 14, 2020
CVE-2020-8231 Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data Not rated Dec 14, 2020
CVE-2020-8285 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP… 7.5 High Dec 14, 2020

Other n/a products