CVE-2020-8177: curl overwrite local file with -J Analysed #887462 Valid Input Validation and Logic Medium 2020-12-05 – 55 CVE-2025-5025: No QUIC certificate pinning with wolfSSL Analysed #3153497 Valid Cryptography Medium 2025-05-28 – 54 CVE-2020-8286: Inferior OCSP verification Analysed #1048457 Valid Cryptography Medium 2020-12-09 – 51 Hackers Attack Curl Vulnerability Accessing Sensitive Information #2912277 N/A Information Disclosure Medium 2024-12-27 – 48 Integer Underflow in src/var.c #3523349 N/A Memory Corruption Medium 2026-01-26 – 46 Negotiate connection reuse with wrong credentials when using CURLAUTH_ANY #3646072 Duplicate Authentication Medium 2026-04-29 – 45 wcurl Argument Injection via Unquoted Variable #3523953 N/A Command and Code Injection Medium 2026-01-26 – 43 CVE-2025-4947: QUIC certificate check skip with wolfSSL Analysed #3150884 Valid Cryptography Medium 2025-05-28 – 43 curl --skip-existing has a TOCTOU race that lets a post-check symlink redirect the later download write #3747959 N/A Race Conditions Medium 2026-05-20 – 42 Windows SSPI connection-pool probe can reuse a connection under the wrong user #3938185 N/A Authentication Medium 2026-08-14 – 39 CVE-2026-7168: cross-proxy Digest auth state leak Analysed #3697719 Valid Information Disclosure Medium 2026-04-29 – 37 MQTT state machine confusion: PINGRESP/DISCONNECT with non-zero remaining_length dispatches to stale nextstate #3702718 Informative Input Validation and Logic Medium 2026-04-29 – 36 Integer Overflow in curl_multi_get_handles() Leading to Heap Buffer Overflow #3575245 N/A Memory Corruption Medium 2026-02-26 – 36 Sensitive information disclosure with malicious netrc file #3211126 Informative Information Disclosure Medium 2025-06-22 – 36 CVE-2024-8096: OCSP stapling bypass with GnuTLS Analysed #2669852 Valid Cryptography Medium 2024-09-11 – 36 CVE-2026-3805: use after free in SMB connection reuse Analysed #3591944 Valid Memory Corruption Medium 2026-03-11 – 34 Unsanitized IPFS CID Allows SSRF Against Configured Gateway #3366484 N/A Server-Side Request Forgery Medium 2025-10-03 – 34 CVE-2024-6197: freeing stack buffer in utf8asn1str Analysed #2559516 Valid Memory Corruption Medium 2024-07-24 – 34 CVE-2026-7009: OCSP stapling bypass with Apple SecTrust Analysed #3694390 Valid Cryptography Medium 2026-04-29 – 33 Missing Security Headers #3310318 N/A No weakness recorded Medium 2025-08-22 – 32 SSL options ISSUERCERT, EC_CURVES and CRLFILE silently ignored by non-OpenSSL backends #3516974 N/A Cryptography Medium 2026-01-20 – 31 lib/http2.c: SSL connections accept non-HTTP push schemes (incomplete fix for 2e8c922a) #3674275 Informative Authentication Medium 2026-04-16 – 30 cookie is sent on redirect #2352676 N/A Authentication Medium 2024-03-28 – 30 libcurl omits IPv6 zoneid from host identity and leaks credentials/cookies across scoped link-local realms #3680680 Informative Information Disclosure Medium 2026-04-19 – 29 Curl_compareheader() fails to match multi-value HTTP headers #3598444 Informative Input Validation and Logic Medium 2026-03-12 – 28 Timing Attack Vulnerability in curl Digest Authentication via Non-Constant-Time String Comparison #3346118 N/A Information Disclosure Medium 2025-09-18 – 28 Integer Overflow in schannel.c TLS Data Transmission #3282709 N/A Memory Corruption Medium 2025-08-02 – 28 CVE-2023-46218: cookie mixed case PSL bypass Analysed #2212193 Valid Information Disclosure Medium 2023-12-06 – 28 URL API: triple-slash parses path segment as hostname #3923212 N/A Input Validation and Logic Medium 2026-08-07 – 27 HTTP/1.1 response framing violation and unsafe connection reuse when transfer decoding is disabled #4025056 Informative Injection and Smuggling Medium 2026-09-19 – 26 CVE-2026-3783: token leak with redirect and netrc Analysed #3583983 Valid Information Disclosure Medium 2026-03-11 – 26 Default Minimum TLS Version Set to TLS v1.0 (Cryptographic Weakness) #3246519 N/A Cryptography Medium 2025-07-10 – 26 CVE-2023-32001: fopen race condition Analysed #2039870 Valid Race Conditions Medium 2023-07-25 – 26 NULL Pointer Dereference (DoS) in libcurl SFTP QUOTE command parsing due to missing return statement #3597359 Informative Memory Corruption Medium 2026-03-11 – 25 Directory Traversal Vulnerability in cURL via Content-Disposition Header Processing #3408126 N/A File and Path Handling Medium 2025-11-01 – 25 curl GnuTLS backend accepts a clientAuth-only certificate for HTTPS server authentication #3752567 N/A Cryptography Medium 2026-05-25 – 24 CVE-2026-6253: proxy credentials leak over redirect-to proxy Analysed #3669637 Valid No weakness recorded Medium 2026-04-29 – 24 Vulnerability Report: Public Exposure of Security Audit File #3272982 N/A Information Disclosure Medium 2025-07-27 – 24 wcurl treats some URL operands after -- as curl options #3708482 N/A Injection and Smuggling Medium 2026-05-06 – 23 libcurl: Integer truncation in curl_easy_ssls_import() causes TLS sessions to never expire #3658049 N/A No weakness recorded Medium 2026-04-09 – 23 Data race in Curl_dnscache_add_negative() corrupts shared DNS cache — heap corruption and double-free when using CURLOPT_SHARE with CURL_LOCK_DATA_DNS #3645361 Informative Race Conditions Medium 2026-04-04 – 23 Use-After-Free race condition in url_move_hostname() via shared connection pool #3638715 N/A Memory Corruption Medium 2026-03-31 – 23 [SFTP] TOCTOU Race Condition in Upload Resume Logic Leads to Arbitrary File Append #3432833 Informative Race Conditions Medium 2025-11-24 – 23 Curl parse_connect_to_string Heap-Overread Leading to Denial of Service via CURLOPT_CONNECT_TO #3306456 N/A Memory Corruption Medium 2025-08-20 – 23 HTTP Request Smuggling Vulnerability Analysis - cURL Security Report #3249936 N/A Injection and Smuggling Medium 2025-07-13 – 23 Missing applicability validation allows non-applicable HTTPS RR to reach ECH processing #4053066 N/A Input Validation and Logic Medium 2026-09-26 – 22 CVE-2026-80256: wcurl backslash bypass Analysed #3969820 Valid File and Path Handling Medium 2026-09-02 – 22 CVE-2026-5545: wrong reuse of HTTP Negotiate connection Analysed #3642555 Valid Authentication Medium 2026-04-29 – 22 Able to bypass HSTS using trailing dot #3574928 N/A Cryptography Medium 2026-02-26 – 22 Unbounded memory consumption via compressed HTTP responses (gzip/brotli/zstd) #3471553 Informative Denial of Service Medium 2025-12-21 – 21