Curl v8.21.0 Release Fixes 18 Security Flaws
ID: ff8bbbea-5fc8-5d24-a7ab-9a05613d9ca5
STIX ID: report--ff8bbbea-5fc8-5d24-a7ab-9a05613d9ca5
Feed Name: securityonline.info
Threat Score
curl v8.21.0 (released June 24, 2026) introduces multiple new features (HTTP/3 proxy CONNECT, MASQUE CONNECT-UDP, named globbing, libssh SHA256 host key support, WebSocket tunneling) and patches 18 security vulnerabilities; the project urges immediate upgrades. The announcement emphasizes substantial bug fixes and security hardening across TLS/StartTLS/mTLS, cookie handling, and build system improvements, but provides no CVE list or exploitation details.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.