curl / Docs / Vulnerability table / 8.5.0 vulnerabilities

Vulnerabilities in curl 8.5.0

curl version 8.5.0 was released on December 6 2023

It has the following 8 published security problems.

Flaw	From version	To and including
netrc and redirect credential leak	6.5	8.11.0
HSTS subdomain overwrites parent cache entry	7.74.0	8.10.1
OCSP stapling bypass with GnuTLS	7.41.0	8.9.1
ASN.1 date parser overread	7.32.0	8.9.0
TLS certificate check bypass with mbedTLS	8.5.0	8.6.0
HTTP/2 push headers memory-leak	7.44.0	8.6.0
Usage of disabled protocol	7.85.0	8.6.0
OCSP verification bypass with TLS session reuse	8.5.0	8.5.0

Futher details

CVE data for 8.5.0 provided as JSON.