curl / Docs / Vulnerability table / 4.1 vulnerabilities

Vulnerabilities in curl 4.1

curl version 4.1 was released on April 3 1998. The following 4 security problems are known to exist in this version.

FlawFrom versionTo and including
trusting FTP PASV responses4.07.73.0
remote filename path traversal in curl tool for Windows4.07.46.0
sensitive HTTP server headers also sent to proxies4.07.42.0
cookie leak with IP address as domain4.07.37.1

CVE data for 4.1 provided as JSON.

Changelog for curl 4.1

See vulnerability summary for the previous release: 4.0 or the subsequent release: 4.2