Known Vulnerabilities for Libcurl by Curl
Listed below are 4 of the newest known vulnerabilities associated with "Libcurl" by "Curl".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49129 json | Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin wher... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-33752 json | curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict requests to internal IP ranges, and ... | Not Provided | 2026-04-06 | 2026-04-06 |
| CVE-2026-7168 json | Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then cha... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-6429 json | When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-6276 json | Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using ... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-5773 json | libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl features a pool of recent conne... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-5545 json | libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Nego... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2023-38546 json | This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of condit... | Not Provided | 2023-10-18 | 2026-05-12 |
| CVE-2022-27782 json | libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have pr... | Not Provided | 2022-06-02 | 2026-05-27 |
| CVE-2022-27781 json | libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certif... | Not Provided | 2022-06-02 | 2026-05-27 |