Curl / Curl

94 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-82209	domain-scoped PSL domain cookie	HIGH	8.2	Sep 6, 2026
CVE-2026-82208	wolfSSL CA-cache hit overrides callback	HIGH	7.5	Sep 6, 2026
CVE-2026-80255	secure cookie attribute bypass with tab	HIGH	7.5	Sep 6, 2026
CVE-2026-80231	native CA store conn reuse	HIGH	7.5	Sep 6, 2026
CVE-2026-80230	OpenSSL pinning bypass	HIGH	7.5	Sep 6, 2026
CVE-2026-80229	OpenSSL provider use-after-free	HIGH	7.5	Sep 6, 2026
CVE-2026-19931	Negotiate ambient user conn reuse	CRITICAL	9.8	Sep 6, 2026
CVE-2026-18924	HTTP/2 server push UAF	CRITICAL	9.1	Sep 6, 2026
CVE-2026-13608	OpenLDAP SASL authentication bypass	HIGH	7.4	Sep 6, 2026
CVE-2026-9547	SSH improper host validation	HIGH	7.4	Jul 3, 2026
CVE-2026-9546	sending old referer	HIGH	7.5	Jul 3, 2026
CVE-2026-9545	exposing HTTP/3 early data	HIGH	7.5	Jul 3, 2026
CVE-2026-9080	UAF after pause in socket callback	HIGH	7.3	Jul 3, 2026
CVE-2026-9079	stale proxy password leak	CRITICAL	9.8	Jul 3, 2026
CVE-2026-8932	incomplete mTLS config matching in conn reuse	HIGH	7.5	Jul 3, 2026
CVE-2026-8927	env-set cross-proxy Digest auth state leak	CRITICAL	9.1	Jul 3, 2026
CVE-2026-8926	password leak with netrc and user in URL	CRITICAL	9.1	Jul 3, 2026
CVE-2026-8925	SASL double-free	CRITICAL	9.8	Jul 3, 2026
CVE-2026-8924	trailing dot domain super cookie	CRITICAL	9.1	Jul 3, 2026
CVE-2026-8458	wrong reuse for different services	HIGH	8.1	Jul 3, 2026
CVE-2026-8286	wrong STARTTLS connection reuse	HIGH	8.1	Jul 3, 2026
CVE-2026-12064	proto-default skips SSH verification	HIGH	7.5	Jul 3, 2026
CVE-2026-11856	cross-origin Digest auth state leak	CRITICAL	9.8	Jul 3, 2026
CVE-2026-11586	WS Auto-PONG memory exhaustion	HIGH	7.5	Jul 3, 2026
CVE-2026-11564	Native CA trust persist	CRITICAL	9.1	Jul 3, 2026

Rows per page

Showing 1 to 25 of 94 CVEs