Docs Overview
Project
Bug Bounty Bug Report Code of conduct Dependencies Donate FAQ Features Governance History Install Known Bugs Logo TODO Web Site Info
Protocols
alt-svc CA Extract HSTS HTTP cookies HTTP/2 HTTP/3 MQTT SSL certs SSL libs compared URL syntax WebSocket
Releases
Changelog curl CVEs Release Table Version Nums Vulnerabilities
Tool
Comparison Table curl man page HTTP Scripting mk-ca-bundle Tutorial When options were added
Who and Why
Companies Copyright Sponsors Thanks The name
curl / Docs / Vulnerability table / 8.0.0 vulnerabilities

Vulnerabilities in curl 8.0.0

Related:
Bug Bounty
Changelog
curl CVEs
Vulnerability Disclosure
Vulnerabilities Table

curl version 8.0.0 was released on March 20 2023. The following 7 security problems are known to exist in this version.

FlawFrom versionTo and including
cookie injection with none file7.9.18.3.0
SOCKS5 heap buffer overflow7.69.08.3.0
HTTP headers eat all memory7.84.08.2.1
more POST-after-PUT confusion7.78.0.1
IDN wildcard match7.12.08.0.1
siglongjmp race condition7.9.88.0.1
UAF in SSH sha256 fingerprint check7.81.08.0.1

CVE data for 8.0.0 provided as JSON.

Changelog for curl 8.0.0

See vulnerability summary for the previous release: 7.88.1 or the subsequent release: 8.0.1