HTTP/2 upload use-after-free that a malicious server can trigger; code execution was demonstrated under strict conditions.

The latest version of curl fixes one severe and twenty-three minor security vulnerabilities and says goodbye to support for ...

A critical buffer overflow vulnerability patched this week in the widely used open-source cURL library (libcurl) has the potential to expose a large number of applications and systems to remote code ...

Libcurl 7.29.0 addresses a critical remote code execution vulnerability found in a wide range of desktop, Web, and mobile applications A critical buffer overflow vulnerability patched this week in the ...

A yearlong AI audit of curl uncovered a 25-year-old authentication bypass, warning enterprise AppSec teams to re-evaluate ...

Curl v8.4.0 is out, and fixes – among other things – a high-severity SOCKS5 heap buffer overflow vulnerability (CVE-2023-38545). Appropriate patches for some older curl versions have been released, ...

For days now, the cybersecurity community has waited anxiously for the big reveal about two security flaws that, according to curl founder Daniel Stenberg, included one that was likely "the worst curl ...

UPDATE (October 11, 2023, 07:15 a.m. ET): Curl v8.4.0 is out and fixes both CVE-2023-38545, a SOCKS5 heap buffer overflow vulnerability and CVE-2023-38546, a cookie injection flaw. Details about two ...

The team maintaining the open source curl library have alerted users to two security vulnerabilities, expected to be fixed in an upcoming version. These vulnerabilities are identified as ...

A critical buffer overflow vulnerability patched this week in the widely used open-source cURL library (libcurl) has the potential to expose a large number of applications and systems to remote code ...