Skip to content
OpenAdvisories

Package · Debian

curl

222 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-5025 Public exploit

    No QUIC certificate pinning with wolfSSL

    libcurl supports *pinning* of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, faili…

    curl curl curl curl Debian Alpine
  • Medium 5.4
    CVE-2018-16890 Public exploit

    libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling …

    The curl Project curl curl curl Debian Ubuntu Alpine