curl 8.10

Status EOLSupport 2024-09 – 2024-11Latest 8.10.1Vulnerabilities 18← All curl versions
High 7.3
2025-01-01≤ 8.10.1

gzip integer overflow

Medium 6.5 Unfixed
2026-03-11≤ 8.10.1

wrong proxy connection reuse with credentials

Medium 6.5 Unfixed
2026-03-11≤ 8.10.1

bad reuse of HTTP Negotiate connection

Medium 6.5 Unfixed
2025-05-28≤ 8.10.1

QUIC certificate check skip with wolfSSL

Medium 6.3 Unfixed
2026-01-08≤ 8.10.1

broken TLS options for threaded LDAPS

Medium 5.9 Unfixed
2026-01-08≤ 8.10.1

No QUIC certificate pinning with GnuTLS

Medium 5.9
2024-11-06≤ 8.10.1

HSTS subdomain overwrites parent cache entry

Medium 5.3 Unfixed
2026-04-29≤ 8.10.1

curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

Medium 5.3 Unfixed
2026-04-29≤ 8.10.1

curl: curl: Information disclosure due to incorrect TLS connection reuse

Medium 5.3 Unfixed
2026-03-11≤ 8.10.1

token leak with redirect and netrc

Medium 5.3 Unfixed
2026-01-08≤ 8.10.1

libssh global known_hosts override

Medium 5.3 Unfixed
2026-01-08≤ 8.10.1

OpenSSL partial chain store policy bypass

Medium 5.3 Unfixed
2026-01-08≤ 8.10.1

bearer token leak on cross-protocol redirect

Medium 4.8 Unfixed
2025-05-28≤ 8.10.1

No QUIC certificate pinning with wolfSSL

Medium 4.3 Unfixed
2025-11-07≤ 8.10.1

missing SFTP host verification with wolfSSH

Low 3.4
2025-01-01≤ 8.10.1

netrc and default credential leak

Low 3.4
2024-12-11≤ 8.10.1

netrc and redirect credential leak

Low 3.1 Unfixed
2026-01-08≤ 8.10.1

libssh key passphrase bypass without agent set