Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CURL-CVE-2025-10148
  • github.com/curl/curl.git
predictable WebSocket mask 10 Sep
  • Fix available
CURL-CVE-2025-9086
  • github.com/curl/curl.git
Out of bounds read for cookie path 10 Sep
  • Fix available
OSV-2025-657
  • OSS-Fuzz/curl
  • github.com/curl/curl.git
Heap-use-after-free in ftp_pp_statemachine 20 Aug
  • Fix available
CVE-2025-5399
  • github.com/curl/curl
See record for full details 07 Jun
  • Fix available
  • Severity - 7.5 (High)
CURL-CVE-2025-5399
  • github.com/curl/curl.git
WebSocket endless loop 04 Jun
  • Fix available
CURL-CVE-2025-4947
  • github.com/curl/curl.git
QUIC certificate check skip with wolfSSL 28 May
  • Fix available
CURL-CVE-2025-5025
  • github.com/curl/curl.git
No QUIC certificate pinning with wolfSSL 28 May
  • Fix available
CVE-2025-4947
  • github.com/curl/curl
See record for full details 28 May
  • Fix available
  • Severity - 6.5 (Medium)
CVE-2025-5025
  • github.com/curl/curl
See record for full details 28 May
  • Fix available
  • Severity - 4.8 (Medium)
CVE-2025-0167
  • github.com/curl/curl
See record for full details 05 Feb
  • Fix available
  • Severity - 3.4 (Low)
CVE-2025-0665
  • github.com/curl/curl
See record for full details 05 Feb
  • No fix available
  • Severity - 9.8 (Critical)
CVE-2025-0725
  • github.com/curl/curl
See record for full details 05 Feb
  • Fix available
  • Severity - 7.3 (High)
CURL-CVE-2025-0167
  • github.com/curl/curl.git
netrc and default credential leak 05 Feb
  • Fix available
CURL-CVE-2025-0665
  • github.com/curl/curl.git
eventfd double close 05 Feb
  • Fix available
CURL-CVE-2025-0725
  • github.com/curl/curl.git
gzip integer overflow 05 Feb
  • Fix available
CVE-2024-11053
  • github.com/curl/curl
See record for full details 11 Dec 2024
  • Fix available
  • Severity - 3.4 (Low)