Improper Validation

libcurl.so is vulnerable to improper validation. The library does not properly verify the server's name in a certificate when establishing a TLS connection, causing the certificate verifications to be performed...

Information Disclosure

libcurl.so is vulnerable to information disclosure. HTTP headers are sent to both proxy and destination servers. This can lead to confidential information such as basic authorization headers containing user credentials being exposed to remote proxy servers...