How many curl libcurl CVEs are in CISA KEV?

None of curl libcurl's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of curl libcurl are affected?

79 distinct curl libcurl versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in curl libcurl CVEs?

curl libcurl's CVEs most often map to these CWE weakness types: CWE-297 (Improper Validation of Certificate with Host Mismatch).

What is the average severity of curl libcurl CVEs?

The average CVSS base score across curl libcurl's scored CVEs is 6.6.

curl libcurl Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: curl libcurl vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

curl libcurl Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

curl libcurl has 6 published CVE records since 2009, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting curl libcurl, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of curl libcurl's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of curl libcurl's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3 of curl libcurl's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every curl libcurl version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

7.12 <= v <= 7.123 CVEs
7.12.1 <= v <= 7.12.13 CVEs
7.12.2 <= v <= 7.12.23 CVEs
7.12.3 <= v <= 7.12.33 CVEs
7.13 <= v <= 7.133 CVEs
7.13.1 <= v <= 7.13.13 CVEs
7.13.2 <= v <= 7.13.23 CVEs
7.14 <= v <= 7.143 CVEs
7.14.1 <= v <= 7.14.13 CVEs
7.15 <= v <= 7.153 CVEs
7.15.1 <= v <= 7.15.13 CVEs

Common weakness types

The CWE weakness categories most often found in curl libcurl CVEs. Follow any weakness for its full explanation.

CWE-297Improper Validation of Certificate with Host Mismatch1 CVE

Disclosure activity by year

How many curl libcurl CVEs were published each year.

2009

2010

2012

2024

Other curl products

Browse vulnerabilities for other products by curl.

curl193 CVEs curl:2 CVEs wcurl1 CVEs

All curl vulnerabilities

Frequently asked questions

Common questions about curl libcurl vulnerabilities.

How many CVEs does curl libcurl have?: curl libcurl has 6 published CVE records since 2009.
How many curl libcurl CVEs are in CISA KEV?: None of curl libcurl's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for curl libcurl vulnerabilities?: Yes — 3 of curl libcurl's CVEs have a known public exploit.
Which versions of curl libcurl are affected?: 79 distinct curl libcurl versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in curl libcurl CVEs?: curl libcurl's CVEs most often map to these CWE weakness types: CWE-297 (Improper Validation of Certificate with Host Mismatch).
What is the average severity of curl libcurl CVEs?: The average CVSS base score across curl libcurl's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track curl libcurl vulnerabilities

Monitor new curl libcurl vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing