curl still vulnerable to SMB access smuggling via FILE URL on Windows #812969 Informative Input Validation and Logic – 2021-01-08 – – CVE-2026-86412: server-set cookie erases cookie jar #3973201 Valid Input Validation and Logic – 2026-10-14 – – Division by zero if terminal width is 2 #774883 Informative Input Validation and Logic – 2021-02-08 – 1 curl proceeds with unsafe connections when -K file can't be read #1542881 Informative Input Validation and Logic High 2022-04-21 – 1 KRB-FTP: Security level downgrade #1590102 N/A Input Validation and Logic None 2022-06-05 – 1 CVE-2026-8924: trailing dot domain super cookie #3733905 Valid Input Validation and Logic Low 2026-06-24 – 1 CVE-2026-80255: secure cookie attribute bypass with tab #3972395 Valid Input Validation and Logic – 2026-09-03 – 1 CVE-2026-111482: libssh2 knownhosts prefix match #4112709 Valid Input Validation and Logic Low 2026-10-26 – 1 CVE-2026-111481: server-set cookie still aborts cookie jar #4112912 Valid Input Validation and Logic Low 2026-10-26 – 1 CVE-2026-111950: TLS session cache diff scheme reuse #4122175 Valid Input Validation and Logic Low 2026-10-26 – 1 Certificate authentication re-use on redirect #1563061 N/A Input Validation and Logic Medium 2022-05-11 – 2 Proxy CONNECT response poisoning via authentication retry in cf-h1-proxy.c (libcurl) #3767963 Informative Input Validation and Logic Medium 2026-06-03 – 2 Derived cookie Path aborts cookie jar loading in curl 8.23.0 #4127231 N/A Input Validation and Logic Low 2026-10-26 – 2 CVE-2022-32221: POST following PUT confusion #1704017 Valid Input Validation and Logic Medium 2022-11-26 – 3 CVE-2023-28322: more POST-after-PUT confusion #1954658 Valid Input Validation and Logic Low 2023-05-18 – 3 CVE-2026-8932: incomplete mTLS config matching in conn reuse #3733910 Valid Input Validation and Logic Low 2026-06-24 – 3 CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 bypass if string not 32 chars #1549461 N/A Input Validation and Logic Medium 2022-04-25 – 4 libssh backend CURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 validation bypass #1825377 Informative Input Validation and Logic Low 2023-01-07 – 4 CVE-2021-22922: Wrong content via metalink not discarded #1213175 Valid Input Validation and Logic Medium 2021-07-21 – 5 CVE-2021-22924: Bad connection reuse due to flawed path name checks #1223565 Valid Input Validation and Logic High 2021-07-21 – 5 CVE-2021-22926: CURLOPT_SSLCERT mixup with Secure Transport #1234760 Valid Input Validation and Logic Medium 2021-07-21 – 5 urlapi: CURLUPART_HOST accepts text after an IPv6 zone ip and URL round trip changes the host #4127756 N/A Input Validation and Logic Low 2026-10-19 – 5 CVE-2022-27782: TLS and SSH connection too eager reuse #1555796 Valid Input Validation and Logic Medium 2022-05-11 – 6 CVE-2022-32207: Unpreserved file permissions #1573634 Valid Input Validation and Logic Medium 2022-06-27 – 6 -H with space prefix leads to previous header injection when used with --proxy #2864859 N/A Input Validation and Logic Medium 2025-07-07 – 6 CURL_NETRC_REQUIRED sends the URL password when the .netrc file has no matching entry #4137523 N/A Input Validation and Logic Low 2026-10-23 – 6 CVE-2022-27775: Bad local IPv6 connection reuse #1546268 Valid Input Validation and Logic Low 2022-04-27 – 7 curl file writing susceptible to symlink attacks #1814824 Informative Input Validation and Logic Low 2023-01-07 – 7 TLS verifyhost bypass in rustls, mbedTLS, and wolfSSL when verifypeer=0 #3734095 Informative Input Validation and Logic – 2026-05-19 – 7 curl/libcurl vulnerable to TLS truncation attacks #1826392 N/A Input Validation and Logic Medium 2026-06-10 – 8 Arbitrary File Deletion Vulnerability in curl Source Code via os.unlink() #2864414 N/A Input Validation and Logic High 2025-07-07 – 8 rustls backend silently ignores CURLOPT_CRLFILE when native CA store is active #3734935 Informative Input Validation and Logic – 2026-05-18 – 8 Cache purge requests are not authenticated #1994585 Informative Input Validation and Logic Medium 2023-05-20 – 9 WebSocket Logic Error: Control Frame (PING/PONG) Starvation causes Connection Drop (DoS) during large transfers #3480039 Informative Input Validation and Logic Medium 2025-12-28 – 9 ignoring 'options' when doing connection reuse #3646914 Informative Input Validation and Logic – 2026-04-05 – 9 SMB access smuggling via FILE URL on Windows #726117 N/A Input Validation and Logic None 2021-01-17 – 10 [High] MITM via Insecure CA Path Handling in cURL (--capath, CURLOPT_CAPATH) (CWE-494: Download of Code Without Integrity Check) #3120969 N/A Input Validation and Logic High 2025-06-30 – 10 Logical Flaw in curl_url_set Leads to Inconsistent Query Parameter Encoding #3403880 N/A Input Validation and Logic Medium 2025-10-29 – 10 Trailing-dot IPv4 URL bypasses IP-address guard, allows wildcard DNS SAN match #3734921 Informative Input Validation and Logic None 2026-05-17 – 10 CVE-2022-27778: curl removes wrong file on error #1553598 Valid Input Validation and Logic Medium 2022-05-11 – 11 CVE-2022-32208: FTP-KRB bad message verification #1590071 Valid Input Validation and Logic Low 2022-06-27 – 11 TLS peer-verification bypass via mid-transfer ssl_config mutation #3735276 N/A Input Validation and Logic – 2026-05-19 – 11 42: `VMS_STS` macro typo (`< 3` vs `<< 3`) turns curl failures into successful OpenVMS conditions #3973169 Informative Input Validation and Logic – 2026-08-29 – 11 Missing enforcement of SFTP quote syntax can lead to operation on wrong object #3379102 N/A Input Validation and Logic – 2025-10-12 – 12 A logic error in detect_proxy caused truncation of environment variable names for long protocol schemes. #3473182 N/A Input Validation and Logic Low 2025-12-21 – 12 DNS domain search list followed for extant domain missing A or AAAA records #3780733 N/A Input Validation and Logic Low 2026-06-08 – 12 CVE-2022-35252: control code in cookie denial of service #1613943 Valid Input Validation and Logic Low 2022-08-31 – 13 cookie: case-insensitive path comparison in replace_existing() allows cookie eviction across distinct paths #3735238 Informative Input Validation and Logic – 2026-05-18 – 13 CVE-2021-22897: schannel cipher selection surprise #1172857 Valid Input Validation and Logic Low 2021-05-26 – 14 curl --continue-at confusion #2859735 N/A Input Validation and Logic Medium 2025-07-07 – 14