rootio-curl vulnerabilities (Root)
66 vulnerabilities.
-
rootio-curlRoot wolfSSL public-key pinning bypass 9.1 Critical -
rootio-curlRoot password leak in CURLINFO_EFFECTIVE_URL 7.5 High -
rootio-curlRoot curl_mime_free stack overflow by recursion 7.5 High -
rootio-curlRoot -J no-clobber guarantee bypassed with 103 early hints 7.5 High -
rootio-curlRoot TFTP direction confusion 8.1 High -
rootio-curlRoot FTP wildcard write callback mixup 9.1 Critical -
rootio-curlRoot never-ending loop via server response omission 8.1 High -
rootio-curlRoot server-set cookie aborts cookie jar load 8.1 High -
rootio-curlRoot knownhost callback mismatches key as missing 7.4 High -
rootio-curlRoot IMAP APPEND plus CRLF conversion command injection 8.1 High -
rootio-curlRoot HSTS response erases persisted entries 8.1 High -
rootio-curlRoot HSTS cache import drops longer-lived child 8.1 High -
rootio-curlRoot leaking host credentials to HTTP proxy 9.1 Critical -
rootio-curlRoot redirect to SFTP or SCP bypasses host verification 8.1 High -
rootio-curlRoot stale SigV4 headers sent unintended 8.1 High -
rootio-curlRoot local interface connection reuse mixup 8.1 High -
rootio-curlRoot info leak uploading over WebSockets with GnuTLS 8.1 High -
rootio-curlRoot domain-scoped PSL domain cookie 8.2 High -
rootio-curlRoot secure cookie attribute bypass with tab 7.5 High -
rootio-curlRoot OpenSSL pinning bypass 7.5 High -
rootio-curlRoot OpenSSL provider use-after-free 7.5 High -
rootio-curlRoot Negotiate ambient user conn reuse 9.8 Critical -
rootio-curlRoot HTTP/2 server push UAF 9.1 Critical -
rootio-curlRoot OpenLDAP SASL authentication bypass 7.4 High -
rootio-curlRoot wolfSSL CA-cache hit overrides callback 7.5 High -
rootio-curlRoot native CA store conn reuse 7.5 High -
rootio-curlRoot SSH improper host validation 7.4 High -
rootio-curlRoot exposing HTTP/3 early data 7.5 High -
rootio-curlRoot UAF after pause in socket callback 7.3 High -
rootio-curlRoot stale proxy password leak 9.8 Critical -
rootio-curlRoot incomplete mTLS config matching in conn reuse 7.5 High -
rootio-curlRoot env-set cross-proxy Digest auth state leak 9.1 Critical -
rootio-curlRoot password leak with netrc and user in URL 9.1 Critical -
rootio-curlRoot trailing dot domain super cookie 9.1 Critical -
rootio-curlRoot wrong reuse for different services 6.5 Medium -
rootio-curlRoot wrong STARTTLS connection reuse 8.1 High -
rootio-curlRoot proto-default skips SSH verification 7.5 High -
rootio-curlRoot cross-origin Digest auth state leak 9.8 Critical -
rootio-curlRoot HTTP/2 stream-dependency tree UAF 9.8 Critical -
rootio-curlRoot netrc credential leak with reused proxy connection 5.3 Medium -
rootio-curlRoot stale custom cookie host causes cookie leak 7.5 High -
rootio-curlRoot proxy credentials leak over redirect-to proxy 5.9 Medium -
rootio-curlRoot wrong reuse of SMB connection 7.5 High -
rootio-curlRoot wrong reuse of HTTP Negotiate connection 6.5 Medium -
rootio-curlRoot connection reuse ignores TLS requirement 5.9 Medium -
rootio-curlRoot cross-proxy Digest auth state leak 5.3 Medium -
rootio-curlRoot use after free in SMB connection reuse 7.5 High -
rootio-curlRoot wrong proxy connection reuse with credentials 6.5 Medium -
rootio-curlRoot token leak with redirect and netrc 5.3 Medium -
rootio-curlRoot bad reuse of HTTP Negotiate connection 6.5 Medium - Show olderLoading…