Woofun AI reports that curl has issued a patch addressing 18 security vulnerabilities, encompassing authentication bypass, memory safety issues, and host verification failures. One identified libcurl flaw had persisted for approximately 25 years.

The vulnerabilities impact applications, SDKs, containers, firmware, gateways, and CI/CD environments dependent on libcurl. Users are advised to upgrade immediately and audit for legacy versions, particularly in scenarios involving MTLS, proxy authentication, and connection reuse.