invalid URL parsing with '#'

curl does not parse the authority component of the URL correctly when the host name part ends with a hash character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use a URL parser that follows the RFC to check for allowed...

PT-2016-7531

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.51.0 Description The issue arises from curl's use of the outdated IDNA 2003 standard to handle International Domain Names, which may lead users to unknowingly issue network transfer requests to the wrong host. This is...