#curl
curl 8.23.0 Closes 24 Security Holes, Including Credential Leaks to Rogue Proxies
The curl project has shipped version 8.23.0, closing two dozen security flaws in the data-transfer tool that underpins an estimated 30 billion installations worldwide. The fixes address credential...
25-Year-Old cURL Vulnerability Patched in Record-Breaking Security Release Fixing 18 CVEs
A critical authentication bypass flaw in cURL that had existed undetected for over 25 years has been patched in curl 8.21.0, released June 24, 2026. The release simultaneously...
Curl vulnerability exposes user credentials in redirects
A recently discovered vulnerability in cURL, identified as CVE-2024-11053, poses a significant risk by potentially exposing user credentials during HTTP redirects. This flaw affects various applications that utilize...