Vulnerabilities in curl 8.14.0
curl version 8.14.0 was released on May 28 2025
It has the following 3 published security problems.
| Flaw | From version | To and including |
|---|---|---|
| predictable WebSocket mask | 8.11.0 | 8.15.0 |
| Out of bounds read for cookie path | 7.31.0 | 8.15.0 |
| WebSocket endless loop | 8.13.0 | 8.14.0 |
Further details
CVE data for 8.14.0 provided as JSON.
See vulnerability summary for the previous release: 8.13.0 or the subsequent release: 8.14.1