Skip to content
OpenAdvisories

Package · Wolfi

curl

29 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.4
    CVE-2025-0167

    netrc and default credential leak

    When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` ent…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 3.4
    CVE-2024-11053

    netrc and redirect credential leak

    When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that …

    curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 3.5
    CVE-2024-2004

    Usage of disabled protocol

    When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se wi…

    curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi