curl 8.12

Status EOLSupport 2025-02 – 2025-04Latest 8.12.1Vulnerabilities 15← All curl versions
Medium 6.5 Unfixed
2026-03-11≤ 8.12.1

wrong proxy connection reuse with credentials

CVE
Medium 6.5 Unfixed
2026-03-11≤ 8.12.1

bad reuse of HTTP Negotiate connection

CVE
Medium 6.5 Unfixed
2025-05-28≤ 8.12.1

QUIC certificate check skip with wolfSSL

CVE
Medium 6.3 Unfixed
2026-01-08≤ 8.12.1

broken TLS options for threaded LDAPS

CVE
Medium 5.9 Unfixed
2026-01-08≤ 8.12.1

No QUIC certificate pinning with GnuTLS

CVE
Medium 5.3 Unfixed
2026-04-29≤ 8.12.1

curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

CVE
Medium 5.3 Unfixed
2026-04-29≤ 8.12.1

curl: curl: Information disclosure due to incorrect TLS connection reuse

CVE
Medium 5.3 Unfixed
2026-03-11≤ 8.12.1

token leak with redirect and netrc

CVE
Medium 5.3 Unfixed
2026-01-08≤ 8.12.1

libssh global known_hosts override

CVE
Medium 5.3 Unfixed
2026-01-08≤ 8.12.1

OpenSSL partial chain store policy bypass

CVE
Medium 5.3 Unfixed
2026-01-08≤ 8.12.1

bearer token leak on cross-protocol redirect

CVE
Medium 5.3 Unfixed
2025-09-12≤ 8.12.1

predictable WebSocket mask

CVE
Medium 4.8 Unfixed
2025-05-28≤ 8.12.1

No QUIC certificate pinning with wolfSSL

CVE
Medium 4.3 Unfixed
2025-11-07≤ 8.12.1

missing SFTP host verification with wolfSSH

CVE
Low 3.1 Unfixed
2026-01-08≤ 8.12.1

libssh key passphrase bypass without agent set

CVE