MEDIUM5.3EPSS 0.08%Successfully using libcurl to do a transfer over a specific HTTP proxy (`proxyA`) with **Digest** authentication and then changing the prox…
MEDIUM5.3When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server cert…
MEDIUM5.3EPSS 0.02%When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first hos…
HIGH7.5EPSS 0.01%Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy…
MEDIUM5.9EPSS 0.03%curl might erroneously pass on credentials for a first proxy to a second proxy.
HIGH7.5EPSS 0.02%libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.
MEDIUM6.5EPSS 0.04%libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenti…
MEDIUM5.9EPSS 0.01%A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool.