Curl Wcurl vulnerabilities

1 vulnerability

Known vulnerabilities in Curl Wcurl, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.6CVE-2025-11563curlcurl+12
EPSS score
0.38%
URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it. This flaw only affects the wcurl command line tool.