curl vulnerabilities (Alpaquita)
85 vulnerabilities.
curlAlpaquitaAuthorization: Negotiate sent to foreign origin9.1 CriticalcurlAlpaquitacross-origin reuse of a Negotiate connection9.1 CriticalcurlAlpaquitaNegotiate credentials sent to redirected origin9.1 CriticalcurlAlpaquitaFTP connection reuse inherits client-certificate9.1 CriticalcurlAlpaquitapassword leak in CURLINFO_EFFECTIVE_URL7.5 HighcurlAlpaquitaHTTP/2 upload Use-After-Free8.1 HighcurlAlpaquitacurl_mime_free stack overflow by recursion7.5 HighcurlAlpaquita-J no-clobber guarantee bypassed with 103 early hints7.5 HighcurlAlpaquitaTFTP direction confusion8.1 HighcurlAlpaquitaFTP wildcard write callback mixup9.1 CriticalcurlAlpaquitanever-ending loop via server response omission8.1 HighcurlAlpaquitaserver-set cookie aborts cookie jar load8.1 HighcurlAlpaquitaIMAP APPEND plus CRLF conversion command injection8.1 HighcurlAlpaquitaHSTS response erases persisted entries8.1 HighcurlAlpaquitaHSTS cache import drops longer-lived child8.1 HighcurlAlpaquitaleaking host credentials to HTTP proxy9.1 CriticalcurlAlpaquitaserver-set cookie erases cookie jar8.1 HighcurlAlpaquitaredirect to SFTP or SCP bypasses host verification8.1 HighcurlAlpaquitastale SigV4 headers sent unintended8.1 HighcurlAlpaquitalocal interface connection reuse mixup8.1 HighcurlAlpaquitaUpdated curl package fixes security vulnerabilitiesNo scorecurlAlpaquitadomain-scoped PSL domain cookie8.2 HighcurlAlpaquitasecure cookie attribute bypass with tab7.5 HighcurlAlpaquitaOpenSSL pinning bypass7.5 HighcurlAlpaquitaOpenSSL provider use-after-free7.5 HighcurlAlpaquitaNegotiate ambient user conn reuse9.8 CriticalcurlAlpaquitaHTTP/2 server push UAF9.1 CriticalcurlAlpaquitaOpenLDAP SASL authentication bypass7.4 HighcurlAlpaquitawolfSSL CA-cache hit overrides callback7.5 HighcurlAlpaquitanative CA store conn reuse7.5 HighcurlAlpaquitaSSH improper host validation7.4 HighcurlAlpaquitasending old referer7.5 HighcurlAlpaquitaexposing HTTP/3 early data7.5 HighcurlAlpaquitaUAF after pause in socket callback7.3 HighcurlAlpaquitastale proxy password leak9.8 CriticalcurlAlpaquitaincomplete mTLS config matching in conn reuse7.5 HighcurlAlpaquitaenv-set cross-proxy Digest auth state leak9.1 CriticalcurlAlpaquitapassword leak with netrc and user in URL9.1 CriticalcurlAlpaquitaSASL double-free9.8 CriticalcurlAlpaquitatrailing dot domain super cookie9.1 CriticalcurlAlpaquitawrong reuse for different services6.5 MediumcurlAlpaquitawrong STARTTLS connection reuse8.1 HighcurlAlpaquitaproto-default skips SSH verification7.5 HighcurlAlpaquitacross-origin Digest auth state leak9.8 CriticalcurlAlpaquitaWS Auto-PONG memory exhaustion7.5 HighcurlAlpaquitaNative CA trust persist9.1 CriticalcurlAlpaquitaQUIC zero-length UDP datagrams busy-loop7.5 HighcurlAlpaquitaHTTP/2 stream-dependency tree UAF9.8 CriticalcurlAlpaquitaOCSP stapling bypass with Apple SecTrust5.3 MediumcurlAlpaquitanetrc credential leak with reused proxy connection5.3 Medium- Show olderLoading…