All vulnerabilities

Servers and applications

CVE-2020-8286

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

Severity
High 7.5
Published
14 Dec 2020
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.74.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:libcurl
  • From 7.41.0 before 7.74.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8286
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8286