Skip to content
OpenAdvisories

Vendor

curl

98 known vulnerabilities.

Products

curl 98
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2025-5025 Public exploit

    No QUIC certificate pinning with wolfSSL

    libcurl supports *pinning* of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, faili…

    curl curl curl curl Debian Alpine