A curl audit by Aisle Over the last year or so, multiple engineers at Aisle have spent a lot... 2026-10-14 09:2:43 | 阅读: 11 | 收藏 | daniel.haxx.se - daniel.haxx.se aisle cves audits humans

A UAF turned RCE In the curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a lo... 2026-10-14 06:11:2 | 阅读: 17 | 收藏 | daniel.haxx.se - daniel.haxx.se memory transfers mistakes multiplexed dangling

curl 8.23.0 Release presentationAt 08:00 UTC (10:00 CEST) of the release day, a... 2026-10-14 06:1:43 | 阅读: 11 | 收藏 | daniel.haxx.se - daniel.haxx.se bugfixes security announce 929 changes42

A slightly faster slimmer curl Back in August I mentioned the new curl performance tests we have runni... 2026-10-13 06:7:10 | 阅读: 14 | 收藏 | daniel.haxx.se - daniel.haxx.se twice allocations download slightly 656

The 2026 curl team The curl security team happens to also double as the curl core team. Th... 2026-10-12 12:40:27 | 阅读: 19 | 收藏 | daniel.haxx.se - daniel.haxx.se authored security invite stefan viktor

Twenty-two pending curl vulnerabilities On October 14 2026 we will ship curl 8.23.0. The next iteration in the... 2026-10-7 07:12:11 | 阅读: 22 | 收藏 | daniel.haxx.se - daniel.haxx.se 2026 ship 92392 cves planned

25 years on Apple computers Exactly on this day, September 25 2001, Apple shipped version 10.1 of t... 2026-9-25 07:57:21 | 阅读: 31 | 收藏 | daniel.haxx.se - daniel.haxx.se shipped barely freely validated merely

curl 8.22.0 Welcome to this new release. Get it as always from https://curl.se.... 2026-9-2 05:52:46 | 阅读: 54 | 收藏 | daniel.haxx.se - daniel.haxx.se 2026 bypass wcurl security reuse

There’s a libcurl.dll in my system32 This afternoon I had a meeting with IT people at a huge US power infras... 2026-8-17 21:27:36 | 阅读: 52 | 收藏 | daniel.haxx.se - daniel.haxx.se windows advice ship ships

curl performance tldr: the live version is here: https://curl.se/perf/How fast is “fast” and is it good enoug... 2026-8-14 11:20:32 | 阅读: 54 | 收藏 | daniel.haxx.se - daniel.haxx.se graphs download machine rounds development

What the bliss taught us At this exact moment curl’s summer of bliss 2026 ends.We (the maintainers of curl) took the... 2026-8-3 06:42:19 | 阅读: 41 | 收藏 | daniel.haxx.se - daniel.haxx.se bliss maintainers summer cna fellow

HTTP Message Signatures with curl The recently published RFC 9421 describes how to do HTTP Message Signat... 2026-7-27 06:55:3 | 阅读: 58 | 收藏 | daniel.haxx.se - daniel.haxx.se httpsig curlopt describes

1,500 curl authors It takes a village to make curl. A rather big village.I have not be... 2026-7-25 14:29:28 | 阅读: 50 | 收藏 | daniel.haxx.se - daniel.haxx.se village repository yay sameeh authored

Workshop Basel day three See also: day one, day two.There is only one thing that is better t... 2026-7-16 20:1:14 | 阅读: 62 | 收藏 | daniel.haxx.se - daniel.haxx.se moq workshop client eyeballs shorter

Workshop Basel day two If you missed it. I already described day one.Caffeinated and ready... 2026-7-15 20:7:14 | 阅读: 66 | 收藏 | daniel.haxx.se - daniel.haxx.se proxies experiences proxy hear expressed

Workshop Basel day one On this hot summer’s day in Basel, Switzerland, the seventh HTTP worksh... 2026-7-14 20:25:28 | 阅读: 57 | 收藏 | daniel.haxx.se - daniel.haxx.se bots meeting beer roughly

Do excellent vulnerability reports Over the years, we have received, read and handled way over one thousand vulnerability reports f... 2026-6-29 07:47:43 | 阅读: 76 | 收藏 | daniel.haxx.se - daniel.haxx.se security reproducer software reporters submission

A curl mountain movie One of my favorite visuals for known vulnerabilities in curl is the mou... 2026-6-26 11:34:0 | 阅读: 51 | 收藏 | daniel.haxx.se - daniel.haxx.se mountain shape movie renders

Trailing dots are the worst Trailing dots after hostnames in URLs remain my worst enemies. I wrote... 2026-6-25 07:48:2 | 阅读: 77 | 收藏 | daniel.haxx.se - daniel.haxx.se trailing dots numerical psl hsts

a CVE dispute A few years years ago the curl project signed up and became a CNA. This means that we are master... 2026-6-24 21:38:52 | 阅读: 71 | 收藏 | daniel.haxx.se - daniel.haxx.se security cna wildcard tl attacker