Direct Vulnerabilities

Known vulnerabilities in the curl package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
CVE-2026-13608

<8.14.1-150700.7.26.1
  • M
CVE-2026-80230

<8.14.1-150700.7.26.1
  • M
CVE-2026-80229

<8.14.1-150700.7.26.1
  • L
Cleartext Transmission of Sensitive Information

<8.14.1-150700.7.23.1
  • L
Server-Side Request Forgery (SSRF)

<8.14.1-150700.7.23.1
  • M
Insufficient Session Expiration

<8.14.1-150700.7.23.1
  • M
CVE-2026-6429

<8.14.1-150700.7.23.1
  • M
Insufficiently Protected Credentials

<8.14.1-150700.7.23.1
  • M
Insufficiently Protected Credentials

<8.14.1-150700.7.23.1
  • M
Authentication Bypass

<8.14.1-150700.7.23.1
  • H
Improper Certificate Validation

<8.14.1-150700.7.20.1
  • M
Use After Free

<8.14.1-150700.7.20.1
  • M
CVE-2026-8458

<8.14.1-150700.7.20.1
  • H
Insufficiently Protected Credentials

<8.14.1-150700.7.20.1
  • H
CVE-2026-9547

<8.14.1-150700.7.20.1
  • M
Authentication Bypass

<8.14.1-150700.7.20.1
  • M
Use After Free

<8.14.1-150700.7.20.1
  • M
CVE-2026-9545

<8.14.1-150700.7.20.1
  • H
Improper Certificate Validation

<8.14.1-150700.7.20.1
  • L
Improper Certificate Validation

<8.14.1-150700.7.20.1
  • H
CVE-2026-8924

<8.14.1-150700.7.20.1
  • M
CVE-2026-3784

<8.14.1-150700.7.14.1
  • M
CVE-2026-3783

<8.14.1-150700.7.14.1
  • M
CVE-2026-3805

<8.14.1-150700.7.14.1
  • H
CVE-2026-1965

<8.14.1-150700.7.14.1
  • M
CVE-2025-14017

<8.14.1-150700.7.11.1
  • M
CVE-2025-15224

<8.14.1-150700.7.8.1
  • M
CVE-2025-14819

<8.14.1-150700.7.8.1
  • M
Open Redirect

<8.14.1-150700.7.8.1
  • M
CVE-2025-15079

<8.14.1-150700.7.8.1
  • M
Directory Traversal

<8.14.1-150700.7.5.1
  • H
Out-of-bounds Read

<8.14.1-150600.4.28.1
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<8.14.1-150600.4.28.1
  • M
Improper Certificate Validation

<8.14.1-150600.4.28.1
  • M
CVE-2025-10148

<8.14.1-150600.4.28.1
  • M
Improper Certificate Validation

<8.14.1-150600.4.28.1
  • M
CVE-2025-0665

<8.14.1-150600.4.28.1
  • M
Out-of-bounds Read

<8.14.1-150600.4.28.1