SlowMist: curl fixes 18 security vulnerabilities, recommends upgrading curl/libcurl as soon as possible and investigating related risks

CoinFeed June 29 news, SlowMist Chief Information Security Officer 23pds posted on X platform that curl recently fixed 18 security vulnerabilities, involving authentication bypass, memory safety, and host verification issues, among which one libcurl vulnerability has existed for about 25 years. The risk is not limited to curl command line, but also widely affects applications, SDKs, containers, firmware, gateways, and CI/CD environments that rely on libcurl. It is recommended to upgrade curl/libcurl as soon as possible and check whether old versions of libcurl are used, especially paying attention to mTLS, proxy authentication, and connection reuse scenarios.