curl / Docs / Vulnerability table / 7.88.0 vulnerabilities

Vulnerabilities in curl 7.88.0

Related:
Audits
Bug Bounty
Changelog
curl CVEs
Vulnerability Disclosure
Vulnerabilities Table

curl version 7.88.0 was released on February 15 2023

It has the following 17 published security problems.

Flaw	From version	To and including
HTTP/2 push headers memory-leak	7.44.0	8.6.0
Usage of disabled protocol	7.85.0	8.6.0
HSTS long filename clears contents	7.84.0	8.4.0
cookie mixed case PSL bypass	7.46.0	8.4.0
cookie injection with none file	7.9.1	8.3.0
SOCKS5 heap buffer overflow	7.69.0	8.3.0
HTTP headers eat all memory	7.84.0	8.2.1
more POST-after-PUT confusion	7.7	8.0.1
IDN wildcard match	7.12.0	8.0.1
siglongjmp race condition	7.9.8	8.0.1
UAF in SSH sha256 fingerprint check	7.81.0	8.0.1
SSH connection too eager reuse still	7.16.1	7.88.1
HSTS double free	7.88.0	7.88.1
GSS delegation too eager connection re-use	7.22.0	7.88.1
FTP too eager connection reuse	7.13.0	7.88.1
SFTP path ~ resolving discrepancy	7.18.0	7.88.1
TELNET option IAC injection	7.7	7.88.1

Futher details

CVE data for 7.88.0 provided as JSON.

Changelog for curl 7.88.0

See vulnerability summary for the previous release: 7.87.0 or the subsequent release: 7.88.1