Vulnerabilities in CURL
47 resultsCVE-2024-0853MEDIUMOCSP verification bypass with TLS session reuseEPSS 1.1%CVE-2024-6874LOWmacidn punycode buffer overreadEPSS 0.8%CVE-2024-8096MEDIUMOCSP stapling bypass with GnuTLSEPSS 0.7%CVE-2026-3805HIGHuse after free in SMB connection reuseEPSS 0.7%CVE-2025-14819MEDIUMOpenSSL partial chain store policy bypassEPSS 0.7%CVE-2026-6253MEDIUMproxy credentials leak over redirect-to proxyEPSS 0.6%CVE-2025-0167LOWnetrc and default credential leakEPSS 0.6%CVE-2025-14524MEDIUMbearer token leak on cross-protocol redirectEPSS 0.6%CVE-2026-5773HIGHwrong reuse of SMB connectionEPSS 0.5%CVE-2026-6429MEDIUMnetrc credential leak with reused proxy connectionEPSS 0.5%CVE-2026-7168MEDIUMcross-proxy Digest auth state leakEPSS 0.5%CVE-2025-10148MEDIUMpredictable WebSocket maskEPSS 0.5%CVE-2025-15079MEDIUMlibssh global known_hosts overrideEPSS 0.5%CVE-2026-5545MEDIUMwrong reuse of HTTP Negotiate connectionEPSS 0.4%CVE-2025-15224LOWlibssh key passphrase bypass without agent setEPSS 0.4%CVE-2025-10966MEDIUMmissing SFTP host verification with wolfSSHEPSS 0.4%CVE-2026-3783MEDIUMtoken leak with redirect and netrcEPSS 0.3%CVE-2026-4873MEDIUMconnection reuse ignores TLS requirementEPSS 0.3%CVE-2025-11563MEDIUMwcurl path traversal with percent-encoded slashesEPSS 0.3%CVE-2026-3784MEDIUMwrong proxy connection reuse with credentialsEPSS 0.3%