Read the docs

curl

Records104All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high47CVSS 7.0–8.9

Exploited now

curl records in CISA KEV

No curl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Curl 4 records MEDIUM Libcurl 4 records MEDIUM Wcurl 1 record LOW

Records

1 record in Wcurl · all components

TI-2025-10596 CVE-2025-11563 · GHSA-6xq2-fm6w-mxfm

wcurl path traversal with percent-encoded slashes

Priority LOW 21

URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00416 Published 2026-02-25 No fix listed CWE-22
Open these records in search →