libcurl | Snyk

Direct Vulnerabilities

Known vulnerabilities in the libcurl package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Improper Certificate Validation	<0:8.12.1-4.el10_2.3
M Information Exposure	<0:8.12.1-4.el10_2.3
M Authentication Bypass by Primary Weakness	<0:8.12.1-4.el10_2.3
M Incorrect Implementation of Authentication Algorithm	<0:8.12.1-4.el10_2.3
H Improper Verification of Cryptographic Signature	<0:8.12.1-4.el10_2.3
H Improperly Implemented Security Check for Standard	<0:8.12.1-4.el10_2.3
H Information Exposure	<0:8.12.1-4.el10_2.4
H Improper Certificate Validation	<0:8.12.1-4.el10_2.3
H Authentication Bypass by Primary Weakness	*
M Comparison Using Wrong Factors	*
M Expired Pointer Dereference	*
M Improper Cross-boundary Removal of Sensitive Data	*
H Information Exposure	*
M Information Exposure	*
H Improperly Implemented Security Check for Standard	*
M Reliance on Cookies without Validation and Integrity Checking	*
M Authentication Bypass	*
M Information Exposure	*
L Origin Validation Error	*
M Cleartext Transmission of Sensitive Information	*
M Comparison Using Wrong Factors	*
M Information Exposure	*
M Exposure of Data Element to Wrong Session	*
M Information Exposure	*
L Information Exposure	*
L Improperly Implemented Security Check for Standard	*
M Improper Certificate Validation	*
L Authentication Bypass by Primary Weakness	*
M Out-of-bounds Read	<0:8.12.1-2.el10_1.2
M Out-of-bounds Read	<0:8.12.1-1.el10_0.4
M Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element	*
L Predictability Problems	*
L Untrusted Pointer Dereference	*
L Use of Uninitialized Resource	*
L Use of Uninitialized Resource	*
L Improper Certificate Validation	*
L Authentication Bypass	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Information Exposure	*
M Improper Input Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Insufficiently Protected Credentials	*
M Information Exposure	*
M Arbitrary Code Injection	*
M Cleartext Transmission of Sensitive Information	*
M Improper Certificate Validation	*
M Use After Free	*
M Cleartext Transmission of Sensitive Information	*
M Information Exposure	*
L Out-of-bounds Read	*
L NULL Pointer Dereference	*
L Out-of-bounds Read	*
M Out-of-bounds Write	*
M Heap-based Buffer Overflow	*
L Information Exposure	*

Vulnerability

Vulnerable Version

Improper Certificate Validation

<0:8.12.1-4.el10_2.3