Loading HuntDB...

GHSA-wh7w-vjg6-xh6h

GitHub Security Advisory

⚠ Unreviewed CRITICAL Has CVE

Advisory Details

Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.

Related CVEs

Key Information

GHSA ID
GHSA-wh7w-vjg6-xh6h
Published
May 14, 2022 12:54 AM
Last Modified
May 14, 2022 12:54 AM
CVSS Score
9.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: September 28, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.