Posts

Showing posts from October, 2023

curl: Probably the worst curl security flaw in a long time

There is an unplanned release for a high severity security flaw in curl scheduled for 11 October 2023. Not much is known about the nature of the vulnerability but it would be wise to get ready and pinpoint all occurrences of curl and libcurl, so that once version 8.4.0 releases, you’ll be able to take immediate action. The one rated HIGH is probably the worst curl security flaw in a long time. Source: https://github.com/curl/curl/discussions/12026