gzip integer overflow
curl 8.10
High 7.3
2025-01-01≤ 8.10.1
Medium 6.5 Unfixed
2026-03-11≤ 8.10.1
wrong proxy connection reuse with credentials
Medium 6.5 Unfixed
2026-03-11≤ 8.10.1
bad reuse of HTTP Negotiate connection
Medium 6.5 Unfixed
2025-05-28≤ 8.10.1
QUIC certificate check skip with wolfSSL
Medium 6.3 Unfixed
2026-01-08≤ 8.10.1
broken TLS options for threaded LDAPS
Medium 5.9 Unfixed
2026-01-08≤ 8.10.1
No QUIC certificate pinning with GnuTLS
Medium 5.9
2024-11-06≤ 8.10.1
HSTS subdomain overwrites parent cache entry
Medium 5.3 Unfixed
2026-04-29≤ 8.10.1
curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies
Medium 5.3 Unfixed
2026-04-29≤ 8.10.1
curl: curl: Information disclosure due to incorrect TLS connection reuse
Medium 5.3 Unfixed
2026-03-11≤ 8.10.1
token leak with redirect and netrc
Medium 5.3 Unfixed
2026-01-08≤ 8.10.1
libssh global known_hosts override
Medium 5.3 Unfixed
2026-01-08≤ 8.10.1
OpenSSL partial chain store policy bypass
Medium 5.3 Unfixed
2026-01-08≤ 8.10.1
bearer token leak on cross-protocol redirect
Medium 4.8 Unfixed
2025-05-28≤ 8.10.1
No QUIC certificate pinning with wolfSSL
Medium 4.3 Unfixed
2025-11-07≤ 8.10.1
missing SFTP host verification with wolfSSH
Low 3.4
2025-01-01≤ 8.10.1
netrc and default credential leak
Low 3.4
2024-12-11≤ 8.10.1
netrc and redirect credential leak
Low 3.1 Unfixed
2026-01-08≤ 8.10.1
libssh key passphrase bypass without agent set