Browse / curl

curl

See its reports on the map

What gets reported to curl

• Memory Corruption163
• Information Disclosure95
• Cryptography74
• Injection and Smuggling66
• Authentication54
• Business Logic52

Most upvoted reports

AllValidInformativeN/ADuplicate

1. CVE-2021-22901: TLS session caching disasterUse After Free · high
   76 votes
2. HTTP/3 Stream Dependency Cycle ExploitN/AImproper Input Validation · high
   60 votes
3. Use-After-Free in SMB connection reuse (req->path dangling pointer after needle destruction)DuplicateUse After Free · high
   58 votes
4. CVE-2025-5399: WebSocket endless loopLoop with Unreachable Exit Condition ('Infinite Loop') · low
   58 votes
5. Memory Leak in libcurl via Location Header Handling (CWE-770)SpamAllocation of Resources Without Limits or Throttling · high
   55 votes
6. CVE-2023-38545: socks5 heap buffer overflowHeap Overflow · high
   55 votes
7. CVE-2020-8177: curl overwrite local file with -JImproper Input Validation · medium
   55 votes
8. [HIGH] CWE-22 — Path Traversal in FTP Wildcard Download via Unencoded `.` in Escaped FilenamesInformativePath Traversal · high
   54 votes
9. CVE-2025-5025: No QUIC certificate pinning with wolfSSLImproper Certificate Validation · medium
   54 votes
10. Buffer overflow in strcpyN/ABuffer Underflow · critical
    53 votes
11. CVE-2024-7264: ASN.1 date parser overreadBuffer Over-read · low
    53 votes
12. CVE-2020-8286: Inferior OCSP verificationImproper Certificate Validation · medium
    51 votes
13. CVE-2024-9681: HSTS subdomain overwrites parent cache entryBusiness Logic Errors · low
    49 votes
14. Hackers Attack Curl Vulnerability Accessing Sensitive InformationN/AInformation Disclosure · medium
    48 votes
15. Integer Underflow in src/var.cN/AInteger Underflow · medium
    46 votes
16. Negotiate connection reuse with wrong credentials when using CURLAUTH_ANY DuplicateAuthentication Bypass by Primary Weakness · medium
    45 votes
17. MQTT Protocol Packet Injection via Unchecked CONNACK Remaining LengthInformativeCode Injection · low
    45 votes
18. `Curl_socketpair()` fallback vulnerable to man-in-the-middle attackInformativeMan-in-the-Middle
    45 votes
19. Buffer Overflow Vulnerability in strcpy() Leading to Remote Code ExecutionN/AClassic Buffer Overflow · critical
    45 votes
20. Security check upN/AAllocation of Resources Without Limits or Throttling · low
    44 votes
21. wcurl Argument Injection via Unquoted VariableN/ACommand Injection - Generic · medium
    43 votes
22. CVE-2025-10966: missing SFTP host verification with wolfSSHImproper Certificate Validation · low
    43 votes
23. CVE-2025-4947: QUIC certificate check skip with wolfSSLImproper Validation of Certificate with Host Mismatch · medium
    43 votes
24. curl --skip-existing has a TOCTOU race that lets a post-check symlink redirect the later download writeN/ATime-of-check Time-of-use (TOCTOU) Race Condition · medium
    42 votes
25. mbedTLS private-key blob null-termination asymmetry in lib/vtls/mbedtls.c (mbed_load_privkey)InformativeImproper Null Termination
    42 votes
26. CRLF Injection in `--proxy-header` allows extra HTTP headers (CWE-93)N/ACRLF Injection
    42 votes
27. Credential leak on redirect due to improper state clearing when parsing macdef in netrc.cInformativeInformation Exposure Through Sent Data · low
    41 votes
28. Windows SSPI connection-pool probe can reuse a connection under the wrong userN/AAuthentication Bypass by Spoofing · medium
    39 votes
29. HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiBN/AAllocation of Resources Without Limits or Throttling
    39 votes
30. Negotiate Authentication Premature on Connection ReuseDuplicateImproper Authentication - Generic · high
    39 votes
31. Buffer Overflow Risk in Curl_inet_ntop and inet_ntop4N/AClassic Buffer Overflow · high
    39 votes
32. urlapi: off-by-one in custom scheme validation skips last characterInformativeOff-by-one Error · high
    38 votes
33. Buffer Overflow Vulnerability in WebSocket HandlingN/AHeap Overflow · high
    38 votes
34. curl Missing Sec-WebSocket-Accept Verification Enables MITM WebSocket Session HijackingN/AMan-in-the-Middle
    37 votes
35. CVE-2026-7168: cross-proxy Digest auth state leakExposure of Data Element to Wrong Session · medium
    37 votes
36. Bypassing Strict SSH Server Verification via Connection Pool Reuse in libcurlInformativeImproper Access Control - Generic
    37 votes
37. testing hackerone functionsSpamImproper Restriction of Authentication Attempts
    37 votes
38. MQTT state machine confusion: PINGRESP/DISCONNECT with non-zero remaining_length dispatches to stale nextstateInformativeImproper Input Validation · medium
    36 votes
39. Integer Overflow in curl_multi_get_handles() Leading to Heap Buffer OverflowN/AClassic Buffer Overflow · medium
    36 votes
40. CVE-2025-9086: Out of bounds read for cookie pathBuffer Over-read · low
    36 votes
41. Sensitive information disclosure with malicious netrc fileInformativeLLM06: Sensitive Information Disclosure · medium
    36 votes
42. CVE-2025-0167: netrc and default credential leakLLM06: Sensitive Information Disclosure · low
    36 votes
43. CVE-2024-8096: OCSP stapling bypass with GnuTLSImproper Certificate Validation · medium
    36 votes
44. Windows filename sanitizer misses Unicode COM/LPT reserved device namesInformative
    35 votes
45. Credentials forwarded to HTTP after HTTPS→HTTP same-port redirect — url_set_data_creds uses scheme-blind comparatorInformative
    35 votes
46. CVE-2026-3805: use after free in SMB connection reuseUse After Free · medium
    34 votes
47. Unsanitized IPFS CID Allows SSRF Against Configured GatewayN/AServer-Side Request Forgery (SSRF) · medium
    34 votes
48. CVE-2024-6197: freeing stack buffer in utf8asn1strFree of Memory not on the Heap · medium
    34 votes
49. CVE-2026-7009: OCSP stapling bypass with Apple SecTrustImproper Certificate Validation · medium
    33 votes
50. on the implications of permitting procedural cullingN/AUse of Insufficiently Random Values · low
    33 votes
51. CVE-2024-11053: netrc + redirect credential leakInformation Disclosure · low
    33 votes
52. CVE-2024-2004: Usage of disabled protocolMisinterpretation of Input · low
    33 votes
53. Exposed .git/config File Leading to Potential Sensitive Information DisclosureN/AInformation Disclosure · low
    32 votes
54. A quiet New Year wish for security researchersSpam
    32 votes
55. Missing Security HeadersN/AMisconfiguration · medium
    32 votes
56. WebSocket Fragmentation DoS on Curl ClientN/AUncontrolled Resource Consumption · high
    32 votes
57. Domainless COOKIEFILE cookie leaks to unrelated IP-literal hostsInformativeInformation Exposure Through Sent Data
    31 votes
58. MQTT CONNACK Packet Type Bypass leads to RCE via Malicious BrokerInformativeASI05: Unexpected Code Execution (RCE) · critical
    31 votes
59. SSL options ISSUERCERT, EC_CURVES and CRLFILE silently ignored by non-OpenSSL backendsN/AMissing Required Cryptographic Step · medium
    31 votes
60. Arbitrary File Read via file:// Protocol in cURLN/APath Traversal · critical
    31 votes
61. curl_share TOCTOU > RCE via Curl_llist _dtor Function Pointer HijackN/ATime-of-check Time-of-use (TOCTOU) Race Condition · critical
    30 votes
62. Vulnerability Report: Buffer Overflow in Path SanitizationN/AMemory Corruption - Generic · critical
    30 votes
63. SSH/SFTP connection reuse can bypass SSH key identity after ssh_config_matches removalInformativeAuthentication Bypass by Primary Weakness · high
    30 votes
64. Schannel custom-CA path skips Extended Key Usage enforcementInformativeBusiness Logic Errors
    30 votes
65. lib/http2.c: SSL connections accept non-HTTP push schemes (incomplete fix for 2e8c922a)InformativeAuthentication Bypass by Primary Weakness · medium
    30 votes
66. HTTP/1.1 Response Desynchronization via conflicting CL/TE headers in Proxy CONNECTInformativeHTTP Request Smuggling · low
    30 votes
67. SMB READ_ANDX DataOffset not validatedN/Ahigh
    30 votes
68. CVE-2026-3784: wrong proxy connection reuse with credentialsIncorrect Authorization · low
    30 votes
69. Cross‑origin cookies leak and injection risk when using a custom Host headerN/AInsufficiently Protected Credentials
    30 votes
70. Apple SecTrust legacy path accepts untrusted certificates on pre-10.14 macOS/iOS when built with USE_APPLE_SECTRUSTInformativeImproper Certificate Validation · high
    30 votes
71. OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)InformativeUncontrolled Resource Consumption · low
    30 votes
72. CVE-2025-10148: predictable WebSocket maskReusing a Nonce, Key Pair in Encryption · low
    30 votes
73. libcurl: Host-Only Cookies Leak to Alternate IPv4 FormsN/AMisconfiguration
    30 votes
74. Use After Free (that leads to arbitrary Write for some versions) InformativeUse After Free
    30 votes
75. Use-After-Free in OpenSSL Keylog Callback via SSL_get_ex_data() in libcurlN/AUse After Free · high
    30 votes
76. bypass of this Fixed #2437131 [ Inadequate Protocol Restriction Enforcement in curl ]N/ACleartext Transmission of Sensitive Information · low
    30 votes
77. cookie is sent on redirectN/AInsufficiently Protected Credentials · medium
    30 votes
78. CVE-2020-8284: trusting FTP PASV responsesInformation Disclosure · low
    30 votes
79. Use-after-free read of the freed referer buffer in `curl_easy_setopt(CURLOPT_REFERER)` — stale heap bytes transmitted in an outbound `Referer:` headeN/AInformation Disclosure · high
    29 votes
80. libcurl omits IPv6 zoneid from host identity and leaks credentials/cookies across scoped link-local realmsInformativeInformation Disclosure · medium
    29 votes
81. Internal application wrapper or script using curlN/ACode Injection · critical
    29 votes
82. Heap‑based buffer overflow in curl -K <config_file> allows arbitrary write .InformativeHeap Overflow · high
    29 votes
83. ("possible") UAFN/AMemory Corruption - Generic
    29 votes
84. Curl_compareheader() fails to match multi-value HTTP headersInformativeExpected Behavior Violation · medium
    28 votes
85. RTSP RTP Interleaved Parser Assertion Failure (Zero-Length RTP Payload)InformativeImproper Check or Handling of Exceptional Conditions
    28 votes
86. Cookie Max-Age Integer Overflow VulnerabilityN/AInteger Overflow · critical
    28 votes
87. Out-of-bounds read in HTTP method handling causes undefined behavior and potential crash This is sharp, Gaurav. We’ve got a real memory-safety bug insN/ABuffer Over-read · high
    28 votes
88. Timing Attack Vulnerability in curl Digest Authentication via Non-Constant-Time String ComparisonN/AInformation Exposure Through Timing Discrepancy · medium
    28 votes
89. curl leaks destination IP via glibc getaddrinfo() UDP connect, bypassing SOCKS5/TorN/AInformation Disclosure
    28 votes
90. Integer Overflow in schannel.c TLS Data TransmissionN/AInteger Overflow · medium
    28 votes
91. Memory LeakInformativeMemory Corruption - Generic
    28 votes
92. CVE-2023-46218: cookie mixed case PSL bypassInformation Exposure Through Sent Data · medium
    28 votes
93. URL API: triple-slash parses path segment as hostnameN/AUse of Incorrectly-Resolved Name or Reference · medium
    27 votes
94. Heap-OOB read in urlapi `redirect_url()` via `CURLU_GUESS_SCHEME` + `CURLU_NO_GUESS_SCHEME` flowInformativeBuffer Over-read
    27 votes
95. AWS SigV4 Signature Disclosure via Verbose Logging in libcurlN/AInformation Disclosure
    27 votes
96. SMTP Command Injection Vulnerabilities in curlN/ACommand Injection - Generic
    27 votes
97. Stack use-after-scope in HTTP/3 POST request processing via CURLOPT_POSTFIELDSN/AUse After Free · high
    27 votes
98. Double Free Vulnerability in `libcurl` Cookie Management (`cookie.c`)N/ADouble Free
    27 votes
99. CVE-2023-46219: HSTS long file name clears contentsMissing Encryption of Sensitive Data · low
    27 votes
100. HTTP/1.1 response framing violation and unsafe connection reuse when transfer decoding is disabledInformativeHTTP Request Smuggling · medium
     26 votes