{"items":[{"id":"CVE-2026-107929","published":"2026-10-20T20:29:28.177Z","updated":"2026-10-30T16:31:15.917Z","title":"local interface connection reuse mixup","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00667,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107928","published":"2026-10-20T20:28:17.712Z","updated":"2026-10-30T16:26:32.201Z","title":"info leak uploading over WebSockets with GnuTLS","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00705,"kevAdded":null,"exploit":true},{"id":"CVE-2026-94266","published":"2026-10-20T20:27:21.585Z","updated":"2026-10-30T16:22:24.369Z","title":"password leak in CURLINFO_EFFECTIVE_URL","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00556,"kevAdded":null,"exploit":true},{"id":"CVE-2026-94265","published":"2026-10-20T20:26:18.061Z","updated":"2026-10-30T16:19:18.095Z","title":"Authorization: Negotiate sent to foreign origin","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00776,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92391","published":"2026-10-20T20:24:10.745Z","updated":"2026-10-30T16:16:14.958Z","title":"curl_mime_free stack overflow by recursion","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.01166,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92390","published":"2026-10-20T20:23:08.900Z","updated":"2026-10-30T16:10:17.142Z","title":"-J no-clobber guarantee bypassed with 103 early hints","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00589,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92389","published":"2026-10-20T20:21:45.378Z","updated":"2026-10-30T12:19:17.432Z","title":"TFTP direction confusion","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00721,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92388","published":"2026-10-20T20:20:41.220Z","updated":"2026-10-30T12:13:00.038Z","title":"FTP wildcard write callback mixup","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00699,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92387","published":"2026-10-20T20:19:14.672Z","updated":"2026-10-29T19:02:50.636Z","title":"never-ending loop via server response omission","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.01045,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92386","published":"2026-10-20T20:17:37.356Z","updated":"2026-10-29T19:00:33.876Z","title":"server-set cookie aborts cookie jar load","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87866","published":"2026-10-20T20:16:30.866Z","updated":"2026-10-29T18:59:00.981Z","title":"wolfSSL public-key pinning bypass","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.0051,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87865","published":"2026-10-20T20:15:13.165Z","updated":"2026-10-30T12:08:50.301Z","title":"knownhost callback mismatches key as missing","severity":"HIGH","score":7.4,"vendor":"curl","product":"curl","kev":false,"epss":0.00604,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87863","published":"2026-10-20T20:13:22.379Z","updated":"2026-10-30T12:04:02.535Z","title":"HSTS response erases persisted entries","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87864","published":"2026-10-20T20:13:13.359Z","updated":"2026-10-30T12:00:45.483Z","title":"IMAP APPEND plus CRLF conversion command injection","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87862","published":"2026-10-20T20:10:37.039Z","updated":"2026-10-30T11:57:49.186Z","title":"HSTS cache import drops longer-lived child","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00995,"kevAdded":null,"exploit":true},{"id":"CVE-2026-87861","published":"2026-10-20T20:09:28.592Z","updated":"2026-10-30T11:55:20.837Z","title":"cross-origin reuse of a Negotiate connection","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00676,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86415","published":"2026-10-20T20:08:29.941Z","updated":"2026-10-30T11:51:14.723Z","title":"auto client cert connection reuse mixup","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00419,"kevAdded":null,"exploit":false},{"id":"CVE-2026-86414","published":"2026-10-20T20:07:22.464Z","updated":"2026-10-30T11:47:08.351Z","title":"leaking host credentials to HTTP proxy","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00676,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86413","published":"2026-10-20T20:06:11.699Z","updated":"2026-10-30T11:44:06.616Z","title":"Negotiate credentials sent to redirected origin","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00731,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86412","published":"2026-10-20T20:03:28.200Z","updated":"2026-10-29T18:46:02.464Z","title":"server-set cookie erases cookie jar","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00828,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86411","published":"2026-10-20T20:02:03.431Z","updated":"2026-10-29T18:42:03.095Z","title":"FTP connection reuse inherits client-certificate","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00433,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86410","published":"2026-10-20T19:59:26.502Z","updated":"2026-10-29T18:36:17.740Z","title":"redirect to SFTP or SCP bypasses host verification","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00766,"kevAdded":null,"exploit":true},{"id":"CVE-2026-86409","published":"2026-10-20T19:57:01.794Z","updated":"2026-10-29T18:33:49.983Z","title":"stale SigV4 headers sent unintended","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.01096,"kevAdded":null,"exploit":true},{"id":"CVE-2026-92392","published":"2026-10-14T07:46:15.160Z","updated":"2026-10-20T20:25:06.818Z","title":"HTTP/2 upload Use-After-Free","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.01284,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82209","published":"2026-09-06T17:49:35.050Z","updated":"2026-09-15T06:03:16.294Z","title":"domain-scoped PSL domain cookie","severity":"HIGH","score":8.2,"vendor":"curl","product":"curl","kev":false,"epss":0.00373,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82208","published":"2026-09-06T17:49:16.014Z","updated":"2026-09-15T06:03:14.795Z","title":"wolfSSL CA-cache hit overrides callback","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00407,"kevAdded":null,"exploit":true},{"id":"CVE-2026-80255","published":"2026-09-06T17:48:54.275Z","updated":"2026-09-15T06:03:13.400Z","title":"secure cookie attribute bypass with tab","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00478,"kevAdded":null,"exploit":true},{"id":"CVE-2026-80231","published":"2026-09-06T17:48:38.062Z","updated":"2026-09-15T06:03:11.962Z","title":"native CA store conn reuse","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00898,"kevAdded":null,"exploit":true},{"id":"CVE-2026-80230","published":"2026-09-06T17:48:16.262Z","updated":"2026-09-15T06:03:10.429Z","title":"OpenSSL pinning bypass","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00371,"kevAdded":null,"exploit":true},{"id":"CVE-2026-80229","published":"2026-09-06T17:47:59.510Z","updated":"2026-09-15T06:03:08.881Z","title":"OpenSSL provider use-after-free","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00563,"kevAdded":null,"exploit":false},{"id":"CVE-2026-19931","published":"2026-09-06T17:47:43.523Z","updated":"2026-09-15T06:02:51.009Z","title":"Negotiate ambient user conn reuse","severity":"CRITICAL","score":9.8,"vendor":"curl","product":"curl","kev":false,"epss":0.00747,"kevAdded":null,"exploit":true},{"id":"CVE-2026-18924","published":"2026-09-06T17:47:27.820Z","updated":"2026-09-15T06:02:47.329Z","title":"HTTP/2 server push UAF","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00584,"kevAdded":null,"exploit":true},{"id":"CVE-2026-13608","published":"2026-09-06T17:47:01.951Z","updated":"2026-09-15T06:02:45.788Z","title":"OpenLDAP SASL authentication bypass","severity":"HIGH","score":7.4,"vendor":"curl","product":"curl","kev":false,"epss":0.005,"kevAdded":null,"exploit":true},{"id":"CVE-2026-9547","published":"2026-07-03T06:18:44.499Z","updated":"2026-09-15T06:03:34.802Z","title":"SSH improper host validation","severity":"HIGH","score":7.4,"vendor":"curl","product":"curl","kev":false,"epss":0.00361,"kevAdded":null,"exploit":true},{"id":"CVE-2026-9546","published":"2026-07-03T06:18:14.447Z","updated":"2026-09-15T06:03:33.325Z","title":"sending old referer","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00652,"kevAdded":null,"exploit":true},{"id":"CVE-2026-9545","published":"2026-07-03T06:17:55.931Z","updated":"2026-09-15T06:03:31.804Z","title":"exposing HTTP/3 early data","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00408,"kevAdded":null,"exploit":true},{"id":"CVE-2026-9080","published":"2026-07-03T06:17:34.905Z","updated":"2026-09-15T06:03:30.239Z","title":"UAF after pause in socket callback","severity":"HIGH","score":7.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00494,"kevAdded":null,"exploit":true},{"id":"CVE-2026-9079","published":"2026-07-03T06:16:51.127Z","updated":"2026-09-15T06:03:28.741Z","title":"stale proxy password leak","severity":"CRITICAL","score":9.8,"vendor":"curl","product":"curl","kev":false,"epss":0.01064,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8932","published":"2026-07-03T06:16:30.485Z","updated":"2026-09-15T06:03:27.324Z","title":"incomplete mTLS config matching in conn reuse","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00396,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8927","published":"2026-07-03T06:16:06.376Z","updated":"2026-09-15T06:03:25.335Z","title":"env-set cross-proxy Digest auth state leak","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.005,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8926","published":"2026-07-03T06:15:45.735Z","updated":"2026-09-15T06:03:23.777Z","title":"password leak with netrc and user in URL","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00444,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8925","published":"2026-07-03T06:15:25.448Z","updated":"2026-09-15T06:03:22.227Z","title":"SASL double-free","severity":"CRITICAL","score":9.8,"vendor":"curl","product":"curl","kev":false,"epss":0.0108,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8924","published":"2026-07-03T06:15:04.646Z","updated":"2026-09-15T06:03:20.848Z","title":"trailing dot domain super cookie","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00661,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8458","published":"2026-07-03T06:14:42.258Z","updated":"2026-09-15T06:03:19.330Z","title":"wrong reuse for different services","severity":"MEDIUM","score":6.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00371,"kevAdded":null,"exploit":true},{"id":"CVE-2026-8286","published":"2026-07-03T06:14:17.541Z","updated":"2026-09-15T06:03:17.789Z","title":"wrong STARTTLS connection reuse","severity":"HIGH","score":8.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00309,"kevAdded":null,"exploit":true},{"id":"CVE-2026-12064","published":"2026-07-03T06:13:55.302Z","updated":"2026-09-15T06:02:44.283Z","title":"proto-default skips SSH verification","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00414,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11856","published":"2026-07-03T06:13:31.661Z","updated":"2026-09-15T06:02:42.790Z","title":"cross-origin Digest auth state leak","severity":"CRITICAL","score":9.8,"vendor":"curl","product":"curl","kev":false,"epss":0.00688,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11586","published":"2026-07-03T06:13:04.448Z","updated":"2026-09-15T06:02:41.195Z","title":"WS Auto-PONG memory exhaustion","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.0086,"kevAdded":null,"exploit":false},{"id":"CVE-2026-11564","published":"2026-07-03T06:12:35.251Z","updated":"2026-09-15T06:02:39.718Z","title":"Native CA trust persist","severity":"CRITICAL","score":9.1,"vendor":"curl","product":"curl","kev":false,"epss":0.0061,"kevAdded":null,"exploit":true},{"id":"CVE-2026-11352","published":"2026-07-03T06:12:10.777Z","updated":"2026-09-15T06:02:38.244Z","title":"QUIC zero-length UDP datagrams busy-loop","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.0101,"kevAdded":null,"exploit":true},{"id":"CVE-2026-10536","published":"2026-07-03T06:11:15.378Z","updated":"2026-09-15T06:02:36.781Z","title":"HTTP/2 stream-dependency tree UAF","severity":"CRITICAL","score":9.8,"vendor":"curl","product":"curl","kev":false,"epss":0.00598,"kevAdded":null,"exploit":true},{"id":"CVE-2026-7168","published":"2026-05-13T08:29:08.900Z","updated":"2026-09-15T06:03:07.424Z","title":"cross-proxy Digest auth state leak","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00471,"kevAdded":null,"exploit":true},{"id":"CVE-2026-7009","published":"2026-05-13T08:28:53.697Z","updated":"2026-05-13T14:20:33.908Z","title":"OCSP stapling bypass with Apple SecTrust","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00274,"kevAdded":null,"exploit":true},{"id":"CVE-2026-6429","published":"2026-05-13T08:28:36.166Z","updated":"2026-09-15T06:03:05.855Z","title":"netrc credential leak with reused proxy connection","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2026-6276","published":"2026-05-13T08:28:19.273Z","updated":"2026-09-15T06:03:04.059Z","title":"stale custom cookie host causes cookie leak","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00295,"kevAdded":null,"exploit":true},{"id":"CVE-2026-6253","published":"2026-05-13T08:28:03.004Z","updated":"2026-09-15T06:03:02.453Z","title":"proxy credentials leak over redirect-to proxy","severity":"MEDIUM","score":5.9,"vendor":"curl","product":"curl","kev":false,"epss":0.00719,"kevAdded":null,"exploit":true},{"id":"CVE-2026-5773","published":"2026-05-13T08:27:42.342Z","updated":"2026-09-15T06:03:00.894Z","title":"wrong reuse of SMB connection","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00618,"kevAdded":null,"exploit":true},{"id":"CVE-2026-5545","published":"2026-05-13T08:27:26.065Z","updated":"2026-09-15T06:02:59.285Z","title":"wrong reuse of HTTP Negotiate connection","severity":"MEDIUM","score":6.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00414,"kevAdded":null,"exploit":true},{"id":"CVE-2026-4873","published":"2026-05-13T08:27:04.538Z","updated":"2026-09-15T06:02:57.389Z","title":"connection reuse ignores TLS requirement","severity":"MEDIUM","score":5.9,"vendor":"curl","product":"curl","kev":false,"epss":0.00329,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3805","published":"2026-03-11T10:09:37.729Z","updated":"2026-09-15T06:02:55.871Z","title":"use after free in SMB connection reuse","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00896,"kevAdded":null,"exploit":true},{"id":"CVE-2026-3784","published":"2026-03-11T10:09:21.418Z","updated":"2026-09-15T06:02:54.443Z","title":"wrong proxy connection reuse with credentials","severity":"MEDIUM","score":6.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3783","published":"2026-03-11T10:09:08.746Z","updated":"2026-09-15T06:02:52.569Z","title":"token leak with redirect and netrc","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00495,"kevAdded":null,"exploit":true},{"id":"CVE-2026-1965","published":"2026-03-11T10:08:52.431Z","updated":"2026-09-15T06:02:49.175Z","title":"bad reuse of HTTP Negotiate connection","severity":"MEDIUM","score":6.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2025-11563","published":"2026-02-25T07:20:47.012Z","updated":"2026-02-25T18:53:58.252Z","title":"wcurl path traversal with percent-encoded slashes","severity":"MEDIUM","score":4.6,"vendor":"curl","product":"curl","kev":false,"epss":0.00416,"kevAdded":null,"exploit":false},{"id":"CVE-2025-15224","published":"2026-01-08T10:08:27.516Z","updated":"2026-09-15T06:02:33.722Z","title":"libssh key passphrase bypass without agent set","severity":"LOW","score":3.1,"vendor":"curl","product":"curl","kev":false,"epss":0.0048,"kevAdded":null,"exploit":true},{"id":"CVE-2025-15079","published":"2026-01-08T10:08:13.410Z","updated":"2026-09-15T06:02:32.246Z","title":"libssh global known_hosts override","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.0055,"kevAdded":null,"exploit":true},{"id":"CVE-2025-14819","published":"2026-01-08T10:07:54.408Z","updated":"2026-09-15T06:02:30.824Z","title":"OpenSSL partial chain store policy bypass","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00756,"kevAdded":null,"exploit":false},{"id":"CVE-2025-14524","published":"2026-01-08T10:07:25.655Z","updated":"2026-09-15T06:02:29.317Z","title":"bearer token leak on cross-protocol redirect","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.0068,"kevAdded":null,"exploit":false},{"id":"CVE-2025-14017","published":"2026-01-08T10:07:05.554Z","updated":"2026-09-15T06:02:27.813Z","title":"broken TLS options for threaded LDAPS","severity":"MEDIUM","score":6.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00114,"kevAdded":null,"exploit":false},{"id":"CVE-2025-13034","published":"2026-01-08T10:00:25.773Z","updated":"2026-09-15T06:02:26.327Z","title":"No QUIC certificate pinning with GnuTLS","severity":"MEDIUM","score":5.9,"vendor":"curl","product":"curl","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2025-10966","published":"2025-11-07T07:26:30.351Z","updated":"2026-09-15T06:02:24.883Z","title":"missing SFTP host verification with wolfSSH","severity":"MEDIUM","score":4.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2025-10148","published":"2025-09-12T05:10:37.469Z","updated":"2026-09-15T06:02:23.283Z","title":"predictable WebSocket mask","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.00524,"kevAdded":null,"exploit":false},{"id":"CVE-2025-9086","published":"2025-09-12T05:10:03.815Z","updated":"2026-09-15T06:02:35.281Z","title":"Out of bounds read for cookie path","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.01463,"kevAdded":null,"exploit":false},{"id":"CVE-2025-5399","published":"2025-06-07T07:49:09.370Z","updated":"2025-06-09T13:20:29.843Z","title":"WebSocket endless loop","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.01435,"kevAdded":null,"exploit":true},{"id":"CVE-2025-5025","published":"2025-05-28T06:29:51.915Z","updated":"2025-05-30T16:19:53.775Z","title":"No QUIC certificate pinning with wolfSSL","severity":"MEDIUM","score":4.8,"vendor":"curl","product":"curl","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2025-4947","published":"2025-05-28T06:29:34.974Z","updated":"2025-05-28T13:58:33.430Z","title":"QUIC certificate check skip with wolfSSL","severity":"MEDIUM","score":6.5,"vendor":"curl","product":"curl","kev":false,"epss":0.003,"kevAdded":null,"exploit":true},{"id":"CVE-2025-0725","published":"2025-02-05T09:18:20.468Z","updated":"2026-10-15T01:01:56.278Z","title":"gzip integer overflow","severity":"HIGH","score":7.3,"vendor":"curl","product":"curl","kev":false,"epss":0.01801,"kevAdded":null,"exploit":true},{"id":"CVE-2025-0665","published":"2025-02-05T09:16:49.038Z","updated":"2026-10-15T01:01:54.492Z","title":"eventfd double close","severity":"HIGH","score":7,"vendor":"curl","product":"curl","kev":false,"epss":0.01331,"kevAdded":null,"exploit":false},{"id":"CVE-2025-0167","published":"2025-02-05T09:15:06.891Z","updated":"2026-10-15T01:01:51.159Z","title":"netrc and default credential leak","severity":"LOW","score":3.4,"vendor":"curl","product":"curl","kev":false,"epss":0.00748,"kevAdded":null,"exploit":true},{"id":"CVE-2024-11053","published":"2024-12-11T07:34:29.539Z","updated":"2026-10-15T00:37:52.775Z","title":"netrc and redirect credential leak","severity":"LOW","score":3.4,"vendor":"curl","product":"curl","kev":false,"epss":0.01966,"kevAdded":null,"exploit":true},{"id":"CVE-2024-9681","published":"2024-11-06T07:47:20.162Z","updated":"2025-11-03T20:56:39.087Z","title":"HSTS subdomain overwrites parent cache entry","severity":"MEDIUM","score":5.9,"vendor":"curl","product":"curl","kev":false,"epss":0.01987,"kevAdded":null,"exploit":false},{"id":"CVE-2024-8096","published":"2024-09-11T10:03:59.489Z","updated":"2026-10-15T00:33:48.057Z","title":"OCSP stapling bypass with GnuTLS","severity":"MEDIUM","score":6.5,"vendor":"curl","product":"curl","kev":false,"epss":0.00817,"kevAdded":null,"exploit":false},{"id":"CVE-2024-7264","published":"2024-07-31T08:08:14.585Z","updated":"2026-10-15T00:33:44.872Z","title":"ASN.1 date parser overread","severity":"MEDIUM","score":6.3,"vendor":"curl","product":"curl","kev":false,"epss":0.20217,"kevAdded":null,"exploit":false},{"id":"CVE-2024-6874","published":"2024-07-24T07:36:26.887Z","updated":"2025-02-13T17:58:00.151Z","title":"macidn punycode buffer overread","severity":"LOW","score":3.1,"vendor":"curl","product":"curl","kev":false,"epss":0.00786,"kevAdded":null,"exploit":true},{"id":"CVE-2024-6197","published":"2024-07-24T07:29:50.003Z","updated":"2025-02-13T17:54:41.039Z","title":"freeing stack buffer in utf8asn1str","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.04296,"kevAdded":null,"exploit":false},{"id":"CVE-2024-2466","published":"2024-03-27T07:58:24.520Z","updated":"2026-10-15T00:21:26.076Z","title":"TLS certificate check bypass with mbedTLS","severity":"MEDIUM","score":6.5,"vendor":"curl","product":"curl","kev":false,"epss":0.01453,"kevAdded":null,"exploit":true},{"id":"CVE-2024-2379","published":"2024-03-27T07:56:41.158Z","updated":"2026-10-15T00:21:23.024Z","title":"QUIC certificate check bypass with wolfSSL","severity":"MEDIUM","score":6.3,"vendor":"curl","product":"curl","kev":false,"epss":0.01863,"kevAdded":null,"exploit":false},{"id":"CVE-2024-2398","published":"2024-03-27T07:55:48.524Z","updated":"2026-10-15T00:21:24.637Z","title":"HTTP/2 push headers memory-leak","severity":"HIGH","score":8.6,"vendor":"curl","product":"curl","kev":false,"epss":0.36081,"kevAdded":null,"exploit":false},{"id":"CVE-2024-2004","published":"2024-03-27T07:54:27.157Z","updated":"2026-10-15T00:21:19.167Z","title":"Usage of disabled protocol","severity":"LOW","score":3.5,"vendor":"curl","product":"curl","kev":false,"epss":0.01681,"kevAdded":null,"exploit":false},{"id":"CVE-2024-0853","published":"2024-02-03T13:35:25.863Z","updated":"2025-06-20T20:04:09.066Z","title":"OCSP verification bypass with TLS session reuse","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.01102,"kevAdded":null,"exploit":true},{"id":"CVE-2023-46219","published":"2023-12-12T01:38:41.376Z","updated":"2026-10-15T00:04:51.589Z","title":"When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS…","severity":"MEDIUM","score":5.3,"vendor":"curl","product":"curl","kev":false,"epss":0.01133,"kevAdded":null,"exploit":true},{"id":"CVE-2023-46218","published":"2023-12-07T01:10:34.846Z","updated":"2026-10-15T00:04:49.559Z","title":"This flaw allows a malicious HTTP server to set \"super cookies\" in curl that are then passed back to more origins than what is otherwise allowed or possible.…","severity":"MEDIUM","score":6.5,"vendor":"curl","product":"curl","kev":false,"epss":0.01685,"kevAdded":null,"exploit":true},{"id":"CVE-2023-38545","published":"2023-10-18T03:52:00.816Z","updated":"2026-10-14T23:35:01.977Z","title":"This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow…","severity":"HIGH","score":8.8,"vendor":"curl","product":"curl","kev":false,"epss":0.78689,"kevAdded":null,"exploit":true},{"id":"CVE-2023-38546","published":"2023-10-18T03:51:31.276Z","updated":"2026-10-14T23:35:03.905Z","title":"This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs…","severity":"LOW","score":3.7,"vendor":"curl","product":"curl","kev":false,"epss":0.05956,"kevAdded":null,"exploit":false},{"id":"CVE-2023-38039","published":"2023-09-15T03:21:54.348Z","updated":"2025-12-02T20:06:21.809Z","title":"When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have…","severity":"HIGH","score":7.5,"vendor":"curl","product":"curl","kev":false,"epss":0.56211,"kevAdded":null,"exploit":true},{"id":"CVE-2019-5436","published":"2019-05-28T18:47:32.000Z","updated":"2026-10-14T06:35:41.896Z","title":"A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.","severity":"HIGH","score":7.8,"vendor":"curl","product":"curl","kev":false,"epss":0.49739,"kevAdded":null,"exploit":false},{"id":"CVE-2019-5435","published":"2019-05-28T18:44:01.000Z","updated":"2026-10-14T06:35:40.335Z","title":"An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.","severity":"LOW","score":3.7,"vendor":"curl","product":"curl","kev":false,"epss":0.05659,"kevAdded":null,"exploit":false},{"id":"CVE-2017-2629","published":"2018-07-27T19:00:00.000Z","updated":"2024-08-05T14:02:06.938Z","title":"curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the…","severity":"MEDIUM","score":4.3,"vendor":"CURL","product":"curl","kev":false,"epss":0.01234,"kevAdded":null,"exploit":false}]}