Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet

Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet Pierluigi Paganini June 25, 2026 Curl fixed 18 vulnerabilities, including a 25-year-old bug, with issues spanning auth bypass, memory safety, and host validation in libcurl. Curl maintainers addressed eighteen vulnerabilities with a single update, and one of them goes back 25 years. That’s not […]