CVE-2020-8177: curl -J + -i symlink/file-overwrite via rename() in tool_header_cb

CVE-2020-8177: Curl local file overwrite via symlink with -i and -J flags

CVE-2023-46218: curl cookie domain PSL check absent in Curl_cookie_getlist() — asymmetric validation logic bug

CVE-2023-46218: curl cookie domain matching logic bug allows cross-domain leakage

CVE-2023-27534: curl SFTP path traversal via loose tilde-expansion check

CVE-2023-27534: curl SFTP path traversal via weak tilde-prefix check in Curl_getworkingpath

CVE-2023-27534: Path Traversal in curl SFTP Tilde Expansion

CVE-2023-27535: curl FTP connection reuse skips FTP_ACCOUNT / ALTERNATIVE_TO_USER / USE_SSL comparisons

CVE-2023-38545 — curl SOCKS5 heap overflow via state-machine re-entrancy

CVE-2020-8177: curl symlink attack via -J (Content-Disposition) and -i (include headers)

CVE-2020-8177: curl -J + -i local file overwrite via header-callback file creation bypass

CVE-2020-8177: curl local file overwrite via symlink with -J and -i options

CVE-2023-46218 — curl cookie mixed-case PSL bypass in Curl_cookie_add

CVE-2023-46218: curl cookie PSL check missing in Curl_cookie_getlist() — asymmetric validation logic-bug

CVE-2022-32221 curl POST-after-PUT use-after-free

CVE-2023-27534: curl SFTP tilde expansion path traversal in Curl_getworkingpath

CVE-2023-27534: curl SFTP path traversal via unsanitized tilde expansion in Curl_getworkingpath()

CVE-2023-27535: curl FTP connection reuse misses ACCT/ALT-USER credentials

CVE-2023-38545: curl SOCKS5 state machine TOCTOU heap overflow via non-persistent socks5_resolve_local flag

CVE-2023-38545: SOCKS5 Heap Overflow from Hostname Length Truncation