7.85.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-23	CVE-2023-23915	Cleartext Transmission of Sensitive Information vulnerability in multiple products A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. network low complexity haxx netapp splunk CWE-319	6.5
2023-02-23	CVE-2023-23916	Allocation of Resources Without Limits or Throttling vulnerability in multiple products An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. network low complexity haxx fedoraproject debian netapp splunk CWE-770	6.5
2023-02-09	CVE-2022-43552	Use After Free vulnerability in multiple products A use after free vulnerability exists in curl <7.87.0. network high complexity haxx apple splunk CWE-416	5.9
2022-12-23	CVE-2022-43551	Cleartext Transmission of Sensitive Information vulnerability in multiple products A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. network low complexity haxx fedoraproject netapp splunk CWE-319	7.5
2022-12-05	CVE-2022-32221	Exposure of Resource to Wrong Sphere vulnerability in multiple products When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. network low complexity haxx netapp debian apple splunk CWE-668 critical	9.8
2022-12-05	CVE-2022-35260	Out-of-bounds Write vulnerability in multiple products curl can be told to parse a `.netrc` file for credentials. network low complexity haxx netapp apple splunk CWE-787	6.5
2022-10-29	CVE-2022-42915	Double Free vulnerability in multiple products curl before 7.86.0 has a double free. network high complexity haxx fedoraproject netapp apple splunk CWE-415	8.1
2022-10-29	CVE-2022-42916	Cleartext Transmission of Sensitive Information vulnerability in multiple products In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. network low complexity haxx fedoraproject apple splunk CWE-319	7.5