7.86.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-23	CVE-2023-23914	Cleartext Transmission of Sensitive Information vulnerability in multiple products A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. network low complexity haxx netapp splunk CWE-319 critical	9.1
2023-02-23	CVE-2023-23915	Cleartext Transmission of Sensitive Information vulnerability in multiple products A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. network low complexity haxx netapp splunk CWE-319	6.5
2023-02-23	CVE-2023-23916	Allocation of Resources Without Limits or Throttling vulnerability in multiple products An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. network low complexity haxx fedoraproject debian netapp splunk CWE-770	6.5
2023-02-09	CVE-2022-43552	Use After Free vulnerability in multiple products A use after free vulnerability exists in curl <7.87.0. network high complexity haxx apple splunk CWE-416	5.9
2022-12-23	CVE-2022-43551	Cleartext Transmission of Sensitive Information vulnerability in multiple products A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. network low complexity haxx fedoraproject netapp splunk CWE-319	7.5