CURL_jll vulnerabilities (Julia)
88 vulnerabilities.
CURL_jllJuliafreeing stack buffer in utf8asn1str7.5 HighCURL_jllJuliaTLS certificate check bypass with mbedTLS6.5 MediumCURL_jllJuliaQUIC certificate check bypass with wolfSSL6.3 MediumCURL_jllJuliaHTTP/2 push headers memory-leak8.6 HighCURL_jllJuliaUsage of disabled protocol3.5 LowCURL_jllJuliaOCSP verification bypass with TLS session reuse5.3 MediumCURL_jllJuliaThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 MediumCURL_jllJuliaThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 LowCURL_jllJuliaThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 CriticalCURL_jllJuliaA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...5.9 MediumCURL_jllJuliaAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 LowCURL_jllJuliaAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 MediumCURL_jllJuliaA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 HighCURL_jllJuliaAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...5.5 MediumCURL_jllJuliaAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...5.9 MediumCURL_jllJuliaAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...5.9 MediumCURL_jllJuliaA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 HighCURL_jllJuliaA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 HighCURL_jllJuliaAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 MediumCURL_jllJuliaA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 MediumCURL_jllJuliaA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 CriticalCURL_jllJuliaA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 MediumCURL_jllJuliaA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 HighCURL_jllJuliaIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 HighCURL_jllJuliacurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 HighCURL_jllJuliaWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 CriticalCURL_jllJuliaWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 LowCURL_jllJuliaWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 MediumCURL_jllJuliaWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 CriticalCURL_jllJuliacurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 MediumCURL_jllJuliaA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 MediumCURL_jllJulialibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 HighCURL_jllJulialibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 HighCURL_jllJuliaThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 HighCURL_jllJuliaA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 MediumCURL_jllJuliaAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 HighCURL_jllJuliaAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 MediumCURL_jllJuliaAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 High