curl 8.18

Status EOLSupport 2026-01 – 2026-03Latest 8.18.0Vulnerabilities 6← All curl versions
High 7.5 Unfixed
2026-03-11≤ 8.18.0

use after free in SMB connection reuse

CVE
Medium 6.5 Unfixed
2026-03-11≤ 8.18.0

wrong proxy connection reuse with credentials

CVE
Medium 6.5 Unfixed
2026-03-11≤ 8.18.0

bad reuse of HTTP Negotiate connection

CVE
Medium 5.3 Unfixed
2026-04-29≤ 8.18.0

curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

CVE
Medium 5.3 Unfixed
2026-04-29≤ 8.18.0

curl: curl: Information disclosure due to incorrect TLS connection reuse

CVE
Medium 5.3 Unfixed
2026-03-11≤ 8.18.0

token leak with redirect and netrc

CVE