curl | Snyk

Direct Vulnerabilities

Known vulnerabilities in the curl package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L External Control of File Name or Path	*
L External Control of File Name or Path	<0:8.23.0-0.1.hum1
L Information Exposure	<0:8.23.0-0.1.hum1
L Improper Certificate Validation	<0:8.23.0-0.1.hum1
L Information Exposure	*
L Information Exposure	<0:8.23.0-0.1.hum1
L Uncontrolled Recursion	*
L Information Exposure	*
L Uncontrolled Recursion	<0:8.23.0-0.1.hum1
L Information Exposure	<0:8.23.0-0.1.hum1
L Improper Check for Unusual or Exceptional Conditions	<0:8.23.0-0.1.hum1
L Information Exposure	<0:8.23.0-0.1.hum1
L Exposure of Data Element to Wrong Session	*
L Exposure of Data Element to Wrong Session	<0:8.23.0-0.1.hum1
L Information Exposure	<0:8.23.0-0.1.hum1
L Exposure of Data Element to Wrong Session	<0:8.23.0-0.1.hum1
L Improper Certificate Validation	<0:8.23.0-0.1.hum1
L Buffer Over-read	<0:8.23.0-0.1.hum1
L Insufficiently Protected Credentials	*
L Insufficiently Protected Credentials	<0:8.23.0-0.1.hum1
L Improper Validation of Specified Quantity in Input	*
L Improper Validation of Specified Quantity in Input	<0:8.23.0-0.1.hum1
L Information Exposure	*
L Information Exposure	<0:8.23.0-0.1.hum1
L Information Exposure	*
L Information Exposure	<0:8.23.0-0.1.hum1
L Improper Handling of Length Parameter Inconsistency	*
L Improper Handling of Length Parameter Inconsistency	<0:8.23.0-0.1.hum1
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	<0:8.23.0-0.1.hum1
M Expired Pointer Dereference	*
L Improper Validation of Certificate with Host Mismatch	*
L Improper Validation of Certificate with Host Mismatch	<0:8.23.0-0.1.hum1
M Improper Certificate Validation	*
M Information Exposure	*
H Use After Free	*
H Use After Free	<0:8.23.0-0.1.hum1
M Use After Free	<0:8.23.0-0.1.hum1
M Use After Free	*
L Information Exposure	<0:8.23.0-0.1.hum1
L Information Exposure	*
M Expired Pointer Dereference	<0:8.12.1-4.el10_2.7
M Information Exposure	<0:8.12.1-4.el10_2.7
M Information Exposure	<0:8.12.1-4.el10_2.7
M Exposure of Data Element to Wrong Session	<0:8.12.1-4.el10_2.7
M Information Exposure	<0:8.12.1-4.el10_2.7
M Information Exposure	<0:8.12.1-1.el10_0.10
M Incorrect Implementation of Authentication Algorithm	<0:8.12.1-1.el10_0.10
M Authentication Bypass by Primary Weakness	<0:8.12.1-1.el10_0.10
M Information Exposure	<0:8.12.1-1.el10_0.10
H Information Exposure	<0:8.12.1-1.el10_0.10
M Comparison Using Wrong Factors	<0:8.12.1-1.el10_0.10
M Improper Cross-boundary Removal of Sensitive Data	<0:8.12.1-1.el10_0.10
L Improper Certificate Validation	<0:8.12.1-1.el10_0.10
M Reliance on Cookies without Validation and Integrity Checking	<0:8.12.1-1.el10_0.10
M Authentication Bypass	<0:8.12.1-1.el10_0.10
H Improperly Implemented Security Check for Standard	<0:8.12.1-1.el10_0.10
H Authentication Bypass by Primary Weakness	<0:8.12.1-1.el10_0.10
H Improper Certificate Validation	<0:8.12.1-1.el10_0.10
H Improper Verification of Cryptographic Signature	<0:8.12.1-1.el10_0.10
L Information Exposure	<0:8.22.0-0.1.hum1
L Improper Restriction of Communication Channel to Intended Endpoints	*
L Improper Restriction of Communication Channel to Intended Endpoints	<0:8.22.0-0.1.hum1
L Improper Certificate Validation	<0:8.22.0-0.1.hum1
L Incorrect Implementation of Authentication Algorithm	*
L Incorrect Implementation of Authentication Algorithm	<0:8.22.0-0.1.hum1
M Reliance on Cookies without Validation and Integrity Checking	<0:8.12.1-4.el10_2.6
M Comparison Using Wrong Factors	<0:8.12.1-4.el10_2.6
M Information Exposure	<0:8.12.1-4.el10_2.6
M Authentication Bypass	<0:8.12.1-4.el10_2.6
M Improper Cross-boundary Removal of Sensitive Data	<0:8.12.1-4.el10_2.6
H Authentication Bypass by Primary Weakness	<0:8.12.1-4.el10_2.6
L Trust Boundary Violation	<0:8.22.0-0.1.hum1
L Trust Boundary Violation	*
M Exposure of Data Element to Wrong Session	*
L Use After Free	*
L Use After Free	<0:8.22.0-0.1.hum1
M Exposure of Data Element to Wrong Session	<0:8.22.0-0.1.hum1
L Improper Certificate Validation	<0:8.12.1-4.el10_2.3
M Information Exposure	<0:8.12.1-4.el10_2.3
M Authentication Bypass by Primary Weakness	<0:8.12.1-4.el10_2.3
M Incorrect Implementation of Authentication Algorithm	<0:8.12.1-4.el10_2.3
H Improper Verification of Cryptographic Signature	<0:8.12.1-4.el10_2.3
H Improperly Implemented Security Check for Standard	<0:8.12.1-4.el10_2.3
H Information Exposure	<0:8.12.1-4.el10_2.4
H Improper Certificate Validation	<0:8.12.1-4.el10_2.3
H Authentication Bypass by Primary Weakness	<0:8.21.0-0.1.hum1
M Improper Certificate Validation	<0:8.21.0-0.1.1.hum1
M Expired Pointer Dereference	<0:8.21.0-0.1.1.hum1
M HTTP Request Smuggling	<0:8.21.0-0.1.1.hum1
M Improper Certificate Validation	<0:8.21.0-0.1.hum1
M Information Exposure	<0:8.21.0-0.1.hum1
H Improperly Implemented Security Check for Standard	<0:8.21.0-0.1.hum1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:8.21.0-0.1.hum1
M Reliance on Cookies without Validation and Integrity Checking	<0:8.21.0-0.1.hum1
M Information Exposure	<0:8.21.0-0.1.hum1
M Improper Cross-boundary Removal of Sensitive Data	<0:8.21.0-0.1.hum1
H Information Exposure	<0:8.21.0-0.1.hum1
H Allocation of Resources Without Limits or Throttling	<0:8.21.0-0.1.hum1
H Improper Certificate Validation	<0:8.21.0-0.1.hum1
M Comparison Using Wrong Factors	<0:8.21.0-0.1.hum1
M Expired Pointer Dereference	<0:8.21.0-0.1.hum1
H CVE-2026-8925	<0:8.21.0-0.1.hum1
M Authentication Bypass	<0:8.21.0-0.1.hum1
H Improper Verification of Cryptographic Signature	<0:8.21.0-0.1.hum1
M Improper Certificate Validation	<0:8.20.0-2.hum1
M Information Exposure	<0:8.20.0-2.hum1
L Origin Validation Error	*
L Origin Validation Error	<0:8.20.0-0.1.hum1
L Origin Validation Error	*
M Cleartext Transmission of Sensitive Information	*
M Cleartext Transmission of Sensitive Information	<0:8.20.0-0.1.hum1
M Cleartext Transmission of Sensitive Information	*
M Comparison Using Wrong Factors	*
M Comparison Using Wrong Factors	<0:8.20.0-0.1.hum1
M Comparison Using Wrong Factors	*
M Information Exposure	<0:8.20.0-0.1.hum1
M Exposure of Data Element to Wrong Session	<0:8.20.0-0.1.hum1
M Information Exposure	*
M Information Exposure	<0:8.20.0-0.1.hum1
L Improper Certificate Validation	<0:8.19.0-3.hum1
L Information Exposure	<0:8.19.0-3.hum1
L Predictability Problems	<0:8.19.0-3.hum1
L Authentication Bypass by Primary Weakness	<0:8.19.0-3.hum1
L Improperly Implemented Security Check for Standard	<0:8.19.0-3.hum1
M Improper Certificate Validation	<0:8.19.0-3.hum1
M Key Exchange without Entity Authentication	<0:8.19.0-3.hum1
M Out-of-bounds Read	<0:8.19.0-3.hum1
L Information Exposure	*
L Information Exposure	*
L Improperly Implemented Security Check for Standard	*
L Improperly Implemented Security Check for Standard	*
L Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
L Authentication Bypass by Primary Weakness	*
L Authentication Bypass by Primary Weakness	*
M Authentication Bypass by Primary Weakness	<0:8.19.0-3.1.hum1
M Incorrect Implementation of Authentication Algorithm	<0:8.19.0-3.1.hum1
M Expired Pointer Dereference	<0:8.19.0-3.hum1
M Information Exposure	<0:8.19.0-3.1.hum1
M Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element	<0:8.19.0-3.hum1
M Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element	*
M Expired Pointer Dereference	*
M Out-of-bounds Read	<0:8.12.1-2.el10_1.2
M Out-of-bounds Read	<0:8.12.1-1.el10_0.4
M Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element	*
M Out-of-bounds Read	*
L Predictability Problems	*
L Predictability Problems	*
L Out-of-bounds Read	*
L Information Exposure	*
L Use of Uninitialized Resource	*
L Use of Uninitialized Resource	*
L Untrusted Pointer Dereference	*
L Improper Certificate Validation	*
L Improper Authentication	*
M Information Exposure	*
M Use After Free	*
M Improper Certificate Validation	*
M Improper Input Validation	*
M Out-of-bounds Write	*
L Use After Free	*
M Use After Free	*
M Improper Input Validation	*
M Use After Free	*
L Improper Certificate Validation	*
L Out-of-bounds Read	*
L Improper Certificate Validation	*
L Integer Overflow or Wraparound	*
L Improper Authentication	*
M Improper Certificate Validation	*
M Resource Injection	*
M Heap-based Buffer Overflow	*
M Out-of-bounds Write	*
L NULL Pointer Dereference	*
L Out-of-bounds Read	*
M Improper Certificate Validation	*
M Information Exposure	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Out-of-bounds Read	*
M Insufficiently Protected Credentials	*
L Out-of-bounds Read	*
L Out-of-bounds Read	*
M Improper Input Validation	*
L Authentication Bypass	*
M Improper Certificate Validation	*
M Cleartext Transmission of Sensitive Information	*
M Cleartext Transmission of Sensitive Information	*
M Information Exposure	*
M Improper Authentication	*
M Improper Authentication	*
M Arbitrary Code Injection	*
M Information Exposure	*

Vulnerability

Vulnerable Version

External Control of File Name or Path