| Package | Affected versions | Patched versions |
|---|---|---|
| curl | ≥ 7.20.0, < 8.20.0 | 8.20.0 |
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free