https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:17:02 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2017-2629 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-2629 https://cve.radiocsirt.org/vuln/certfr-2017-avi-229 certfr-2017-avi-229 https://cve.radiocsirt.org/vuln/certfr-2017-avi-229 https://cve.radiocsirt.org/vuln/cleanstart-2026-ay18527 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: curl</p> <p>Multiple security vulnerabilities affect the curl package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: curl</p> <p>Multiple security vulnerabilities affect the curl package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ay18527 https://cve.radiocsirt.org/vuln/cnvd-2017-02339 cnvd-2017-02339 https://cve.radiocsirt.org/vuln/cnvd-2017-02339 https://cve.radiocsirt.org/vuln/euvd-2026-72447 EUVD-2026-72447 https://cve.radiocsirt.org/vuln/euvd-2026-72447 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2629 <p>curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server&#39;s certificate&#39;s validity in the code that checks for a test success or failure. It ends up always thinking there&#39;s valid proof, even when there is none or if the server doesn&#39;t support the TLS extension in question. This could lead to users not detecting when a server&#39;s certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).</p> <p>curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server&#39;s certificate&#39;s validity in the code that checks for a test success or failure. It ends up always thinking there&#39;s valid proof, even when there is none or if the server doesn&#39;t support the TLS extension in question. This could lead to users not detecting when a server&#39;s certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-2629 https://cve.radiocsirt.org/vuln/ghsa-7cp4-w7q7-w394 <p>curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server&#39;s certificate&#39;s validity in the code that checks for a test success or failure. It ends up always thinking there&#39;s valid proof, even when there is none or if the server doesn&#39;t support the TLS extension in question. This could lead to users not detecting when a server&#39;s certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).</p> <p>curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server&#39;s certificate&#39;s validity in the code that checks for a test success or failure. It ends up always thinking there&#39;s valid proof, even when there is none or if the server doesn&#39;t support the TLS extension in question. This could lead to users not detecting when a server&#39;s certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).</p> https://cve.radiocsirt.org/vuln/ghsa-7cp4-w7q7-w394 https://cve.radiocsirt.org/vuln/gsd-2017-2629 gsd-2017-2629 https://cve.radiocsirt.org/vuln/gsd-2017-2629 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10582-1 <p>curl-7.79.1-1.1 on GA media</p> <p>curl-7.79.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10582-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1649 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1649