Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #10

curl vulnerability flagged over .netrc credential parsing flaw

Original: 🚨 EUVD-2022-38151 📊 Score: n/a 📦 Product: https:// github.com/curl/curl 📅 Published: 2022-12-05 | Updated: 2026-10-14 📝

A vulnerability catalogued as EUVD-2022-38151 concerns curl, the widely used command-line data transfer tool. When curl parses a .netrc file for credentials, a file ending in a line of 4095 consecutive non-whitespace characters without a newline can trigger faulty behaviour. The entry was first published in December 2022 and has received an updated entry dated October 2026, drawing renewed attention to the long-standing flaw.

Why now: A vulnerability database update brought fresh attention to this curl security flaw.

curlEUVDGitHub

Open on mastodon →

Evidence

• 🚨 EUVD-2022-38151 📊 Score: n/a 📦 Product: https:// github.com/curl/curl 📅 Published: 2022-12-05 | Updated: 2026-10-14 📝 curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/2262083