CVE-2025-14524

When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...

CVE-2025-14524

When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...

CVE-2025-14524 bearer token leak on cross-protocol redirect

When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...

CVE-2025-14017

When doing multi-threaded LDAPS transfers LDAP over TLS with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally...

CVE-2025-13034

When using "CURLOPTPINNEDPUBLICKEY" option with libcurl or "--pinnedpubkey" with the curl tool, curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper...

CVE-2025-13034

The libcurl library and curl tool are affected by a vulnerability where the CURLOPT_PINNEDPUBLICKEY option (or --pinnedpubkey) fails to properly verify the public key of a server certificate under specific conditions. This flaw allows for connection forgery by enabling a connection without the re...

curl: inconsistently Rejection Logic in file:// URLs with Authority

curl's file:// protocol handler inconsistently applies path sanitization. in reject file://../ as Bad File:// URL" but allows the same traversal when an authority/host e.g.,localhost is present file://localhost/../. this inconsistency misleads developers who rely on the bad file:// URL error for...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:0052-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0052-1 advisory. - CVE-2025-14524: bearer token leak on cross-protocol redirect bsc1255731. - CVE-2025-14819: libssh global...

CVE-2025-14524: Insufficiently Protected Credentials

When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host...

OPENSUSE-SU-2026:10017-1 curl-8.18.0-1.1 on GA media

These are all security issues fixed in the curl-8.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-15224: Improper Authentication

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...

curl security vulnerabilities

curl is a cURL open source tool for transferring data from or to a server. A security vulnerability exists in curl that stems from an OAuth2 bearer token being incorrectly passed during cross-protocol redirection...

curl security vulnerabilities

curl is an open source tool from cURL for transferring data from or to a server. A security vulnerability exists in curl that stems from libcurl incorrectly accepting connections to SSH hosts that are not listed in the specified knownhosts file...

curl security vulnerabilities

Curl is a cURL open source tool for transferring data from or to a server. A security vulnerability exists in curl that stems from libcurl incorrectly reusing the CA storage cache, which could lead to the acceptance of an unintended chain of trust...

curl security vulnerabilities

curl is a cURL open source tool for transferring data from or to a server. A security vulnerability exists in curl that stems from a global change to the TLS option in multi-threaded LDAPS transfers, which could cause certificate validation to be accidentally disabled...

CVE-2025-13034: Improper Certificate Validation

When using CURLOPTPINNEDPUBLICKEY option with libcurl or --pinnedpubkey with the curl tool, curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0732

Updates of 'aws-sdk-cpp', 'glib', 'curl', 'capstone' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2026-4.0-0941

Updates of 'curl' packages of Photon OS have been released...

openSUSE Security Advisory (SUSE-SU-2026:0050-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2026-007-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...