CVE security advisories and vulnerability history for libcurl by haxx.
61
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
10
Public exploits
PoC or exploit code
6.8
Avg CVSS
2005–2025
Last updated
Overview
haxx libcurl has 61 published CVE records since 2005, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.
This page aggregates every publicly disclosed vulnerability (CVE) affecting haxx libcurl, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows, zlib.
Severity and exploitation
How the CVSS severity of haxx libcurl's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical12
High18
Medium29
Low2
In CISA’s Known Exploited Vulnerabilities catalog
0
None of haxx libcurl's CVEs are currently listed in CISA's KEV catalog.
Public exploits
10
10 of haxx libcurl's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every haxx libcurl version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
7.31.0 <= v <= 7.31.016 CVEs
7.32.0 <= v <= 7.32.016 CVEs
7.28.0 <= v <= 7.28.015 CVEs
7.28.1 <= v <= 7.28.115 CVEs
7.33.0 <= v <= 7.33.015 CVEs
7.27.0 <= v <= 7.27.014 CVEs
7.30.0 <= v <= 7.30.014 CVEs
7.34.0 <= v <= 7.34.014 CVEs
7.22.0 <= v <= 7.22.013 CVEs
7.23.0 <= v <= 7.23.013 CVEs
7.26.0 <= v <= 7.26.013 CVEs
Common weakness types
The CWE weakness categories most often found in haxx libcurl CVEs. Follow any weakness for its full explanation.
Common questions about haxx libcurl vulnerabilities.
How many CVEs does haxx libcurl have?
haxx libcurl has 61 published CVE records since 2005.
How many haxx libcurl CVEs are in CISA KEV?
None of haxx libcurl's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for haxx libcurl vulnerabilities?
Yes — 10 of haxx libcurl's CVEs have a known public exploit.
Which versions of haxx libcurl are affected?
186 distinct haxx libcurl versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in haxx libcurl CVEs?
haxx libcurl's CVEs most often map to these CWE weakness types: CWE-295 (Improper Certificate Validation), CWE-125 (Out-of-bounds Read), CWE-305 (Authentication Bypass by Primary Weakness), CWE-190 (Integer Overflow or Wraparound).
How many critical haxx libcurl vulnerabilities are there?
haxx libcurl has 12 critical and 18 high-severity CVEs.
What is the average severity of haxx libcurl CVEs?
The average CVSS base score across haxx libcurl's scored CVEs is 6.8.
