Vulnerabilities in CURL
98 resultsCVE-2025-14819MEDIUMOpenSSL partial chain store policy bypassEPSS 0.8%CVE-2025-0167LOWnetrc and default credential leakEPSS 0.7%CVE-2026-19931CRITICALNegotiate ambient user conn reuseEPSS 0.7%CVE-2026-86413CRITICALNegotiate credentials sent to redirected originEPSS 0.7%CVE-2026-92389HIGHTFTP direction confusionEPSS 0.7%CVE-2026-6253MEDIUMproxy credentials leak over redirect-to proxyEPSS 0.7%CVE-2026-107928HIGHinfo leak uploading over WebSockets with GnuTLSEPSS 0.7%CVE-2026-92388CRITICALFTP wildcard write callback mixupEPSS 0.7%CVE-2026-11856CRITICALcross-origin Digest auth state leakEPSS 0.7%CVE-2025-14524MEDIUMbearer token leak on cross-protocol redirectEPSS 0.7%CVE-2026-87861CRITICALcross-origin reuse of a Negotiate connectionEPSS 0.7%CVE-2026-86414CRITICALleaking host credentials to HTTP proxyEPSS 0.7%CVE-2026-107929HIGHlocal interface connection reuse mixupEPSS 0.7%CVE-2026-8924CRITICALtrailing dot domain super cookieEPSS 0.7%CVE-2026-9546HIGHsending old refererEPSS 0.7%CVE-2026-5773HIGHwrong reuse of SMB connectionEPSS 0.6%CVE-2026-11564CRITICALNative CA trust persistEPSS 0.6%CVE-2026-87865HIGHknownhost callback mismatches key as missingEPSS 0.6%CVE-2026-10536CRITICALHTTP/2 stream-dependency tree UAFEPSS 0.6%CVE-2026-92390HIGH-J no-clobber guarantee bypassed with 103 early hintsEPSS 0.6%