curl の脆弱性情報

配布元の告知ページ　2026-06-24 以降を収録

告知	公開日	重大度	CVE
local interface connection reuse mixup ほか 23 件 local interface connection reuse mixup CVE-2026-107929 Low info leak uploading over WebSockets with GnuTLS CVE-2026-107928 Low password leak in CURLINFO_EFFECTIVE_URL CVE-2026-94266 Low Authorization: Negotiate sent to foreign origin CVE-2026-94265 Low HTTP/2 upload Use-After-Free CVE-2026-92392 High curl_mime_free stack overflow by recursion CVE-2026-92391 Low -J no-clobber guarantee bypassed with 103 early hints CVE-2026-92390 Low TFTP direction confusion CVE-2026-92389 Low FTP wildcard write callback mixup CVE-2026-92388 Low never-ending loop via server response omission CVE-2026-92387 Low server-set cookie aborts cookie jar load CVE-2026-92386 Low wolfSSL public-key pinning bypass CVE-2026-87866 Low knownhost callback mismatches key as missing CVE-2026-87865 Low IMAP APPEND plus CRLF conversion command injection CVE-2026-87864 Low HSTS response erases persisted entries CVE-2026-87863 Low HSTS cache import drops longer-lived child CVE-2026-87862 Low cross-origin reuse of a Negotiate connection CVE-2026-87861 Low auto client cert connection reuse mixup CVE-2026-86415 Low leaking host credentials to HTTP proxy CVE-2026-86414 Low Negotiate credentials sent to redirected origin CVE-2026-86413 Low server-set cookie erases cookie jar CVE-2026-86412 Low FTP connection reuse inherits client-certificate CVE-2026-86411 Low redirect to SFTP or SCP bypasses host verification CVE-2026-86410 Low stale SigV4 headers sent unintended CVE-2026-86409 Low 固定リンク	2026-10-14	Low, High	CVE-2026-107929, CVE-2026-107928, CVE-2026-94266 ほか 21 件
domain-scoped PSL domain cookie ほか 8 件 domain-scoped PSL domain cookie CVE-2026-82209 Low wolfSSL CA-cache hit overrides callback CVE-2026-82208 Low secure cookie attribute bypass with tab CVE-2026-80255 Low native CA store conn reuse CVE-2026-80231 Low OpenSSL pinning bypass CVE-2026-80230 Low OpenSSL provider use-after-free CVE-2026-80229 Low Negotiate ambient user conn reuse CVE-2026-19931 Medium HTTP/2 server push UAF CVE-2026-18924 Low OpenLDAP SASL authentication bypass CVE-2026-13608 Low 固定リンク	2026-09-02	Low, Medium	CVE-2026-82209, CVE-2026-82208, CVE-2026-80255 ほか 6 件
proto-default skips SSH verification ほか 16 件 proto-default skips SSH verification CVE-2026-12064 Low cross-origin Digest auth state leak CVE-2026-11856 Medium WS Auto-PONG memory exhaustion CVE-2026-11586 Low Native CA trust persist CVE-2026-11564 Low QUIC zero-length UDP datagrams busy-loop CVE-2026-11352 Low HTTP/2 stream-dependency tree UAF CVE-2026-10536 Low SSH improper host validation CVE-2026-9547 Low sending old referer CVE-2026-9546 Low exposing HTTP/3 early data CVE-2026-9545 Low UAF after pause in socket callback CVE-2026-9080 Low stale proxy password leak CVE-2026-9079 Medium incomplete mTLS config matching in conn reuse CVE-2026-8932 Low env-set cross-proxy Digest auth state leak CVE-2026-8927 Medium password leak with netrc and user in URL CVE-2026-8926 Low SASL double-free CVE-2026-8925 Medium trailing dot domain super cookie CVE-2026-8924 Low wrong reuse for different services CVE-2026-8458 Low 固定リンク	2026-06-24	Low, Medium	CVE-2026-12064, CVE-2026-11856, CVE-2026-11586 ほか 14 件

50 件。配布元が出した告知をそのまま並べたもので、製品の版とはまだ結び付けていません。

こちらで見つけた日

このサイトが更新に気づいた日です。実際に公開された日は、これより前のことがあります。

まだ来ていない日付

配布元が将来の日付で公開しています。予定として書かれていることも、時差の都合でそう見えることもあります。