What’s Vulnerable › Products

curl vulnerabilities

61 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your curl version is affected

Latest curl vulnerabilities

• CVE-2025-0725 — gzip integer overflow (CVSS 7.3)
• CVE-2024-32928 — (CVSS 5.9)
• CVE-2024-7264 — ASN.1 date parser overread (CVSS 6.5)
• CVE-2024-6874 — macidn punycode buffer overread (CVSS 4.3)
• CVE-2024-6197 — freeing stack buffer in utf8asn1str (CVSS 7.5)
• CVE-2023-38546 — (CVSS 3.7)
• CVE-2023-38545 — (CVSS 9.8)
• CVE-2023-27538 — (CVSS 5.5)
• CVE-2023-27537 — (CVSS 5.9)
• CVE-2023-27536 — (CVSS 5.9)
• CVE-2023-27535 — (CVSS 5.9)
• CVE-2021-22945 — (CVSS 9.1)
• CVE-2021-22924 — (CVSS 3.7)
• CVE-2021-22890 — (CVSS 3.7)
• CVE-2021-22876 — (CVSS 5.3)
• CVE-2020-8286 — (CVSS 7.5)
• CVE-2020-8285 — (CVSS 7.5)
• CVE-2020-8231 — (CVSS 7.5)
• CVE-2019-5436 — (CVSS 7.8)
• CVE-2019-3823 — (CVSS 7.5)
• CVE-2019-3822 — (CVSS 9.8)
• CVE-2018-16890 — (CVSS 7.5)
• CVE-2018-14618 — (CVSS 9.8)
• CVE-2016-8622 — (CVSS 9.8)
• CVE-2017-7468 — (CVSS 7.5)