Package · Wolfi

curl

29 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.1

CVE-2026-92392 Public exploit

HTTP/2 upload Use-After-Free

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi

Oct 14, 2026
High 8.8

CVE-2023-38545 Public exploit EPSS 78%

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the h…

curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi

Oct 18, 2023