[SlowMist: curl Fixes 18 Security Vulnerabilities, Prompt Upgrade of curl/libcurl and Risk Assessment Recommended] SlowMist Chief Information Security Officer 23pds posted on the X platform that curl recently fixed 18 security vulnerabilities, involving issues such as authentication bypass, memory safety, and host verification. Among them, one libcurl vulnerability has existed for approximately 25 years. The risks are not limited to the curl command line but also widely affect applications, SDKs, containers, firmware, gateways, and CI/CD environments that rely on libcurl. It is recommended to promptly upgrade curl/libcurl and check whether older versions of libcurl are in use, with particular attention to mTLS, proxy authentication, and connection reuse scenarios.