curl · disclosed reports
No weakness filed
86 disclosed reports · $0 paid
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open curl on HackerOne- reports
- 86
- paid a bounty
- 0
Every one of the 86 is a mark on the map. Named now: 1 to 26, most upvoted first.
- MQTT Protocol Packet Injection via Unchecked CONNACK Remaining Length
- Bypassing Strict SSH Server Verification via Connection Pool Reuse in libcurl
- Windows filename sanitizer misses Unicode COM/LPT reserved device names
- Credentials forwarded to HTTP after HTTPS→HTTP same-port redirect — url_set_data_creds uses scheme-blind comparator
- Exposed .git/config File Leading to Potential Sensitive Information Disclosure
- A quiet New Year wish for security researchers
- Missing Security Headers
- Vulnerability Report: Buffer Overflow in Path Sanitization
- SMB READ_ANDX DataOffset not validated
- libcurl: Host-Only Cookies Leak to Alternate IPv4 Forms
- Arbitrary free in curl's config file parsing.
- CVE-2026-6253: proxy credentials leak over redirect-to proxy
- libcurl: Integer truncation in curl_easy_ssls_import() causes TLS sessions to never expire
- Bearer Token Leaked to Attacker via .netrc Despite CVE-2026-3783 Fix
- Kerberos/SPNEGO Connection Reuse Vulnerability
- Memory leak of ftp (with proxy reuse)
- File URL UNC Path Access (Windows SSRF)
- 27: IMAP custom FETCH listing classification skips literal boundaries, enabling response desynchronization
- libcurl 8.20.0 incomplete fix for CVE-2026-7168: changing only CURLOPT_PROXYPORT leaks stale Proxy Digest auth to a different proxy
- Infinite loop issue in the state machine of the curl project
- Use of Deprecated strcpy() with User-Controlled Environment Variable in Memory Debug Initialization
- Socket API drops expired timeouts for transfers queued behind a connection limit
- CVE-2026-5773: wrong reuse of SMB connection
- TELNET control and environment data bypass HTTPS-proxy TLS
- Unbound cross-peer HTTP Digest challenge state
- Shared HSTS cache accessed without lock
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.