curl / Docs / Vulnerability table / 7.88.0 vulnerabilities

Vulnerabilities in curl 7.88.0

curl version 7.88.0 was released on February 15 2023. The following 11 security problems are known to exist in this version.

Flaw	From version	To and including
HTTP headers eat all memory	7.84.0	8.2.1
more POST-after-PUT confusion	7.7	8.0.1
IDN wildcard match	7.12.0	8.0.1
siglongjmp race condition	7.9.8	8.0.1
UAF in SSH sha256 fingerprint check	7.81.0	8.0.1
SSH connection too eager reuse still	7.16.1	7.88.1
HSTS double free	7.88.0	7.88.1
GSS delegation too eager connection re-use	7.22.0	7.88.1
FTP too eager connection reuse	7.13.0	7.88.1
SFTP path ~ resolving discrepancy	7.18.0	7.88.1
TELNET option IAC injection	7.7	7.88.1

CVE data for 7.88.0 provided as JSON.