Curl has resolved 18 security vulnerabilities, including issues with authentication bypass, memory safety, and host verification, according to SlowMist's Chief Information Security Officer, 23pds. Notably, one libcurl vulnerability has persisted for approximately 25 years. These vulnerabilities impact not only the curl command line but also applications, SDKs, containers, firmware, gateways, and CI/CD environments that utilize libcurl. Users are advised to upgrade curl/libcurl promptly and assess their systems for older versions, with particular attention to mTLS, proxy authentication, and connection reuse scenarios.