curl security audit reports

2024

Trail of Bits performed a security audit of curl's HTTP/3 components, published on February 23, 2024.

See cURL HTTP/3 Components.

2022

Trail of Bits performed a security audit of curl source code and internals, published on December 21, 2022.

See Threat Model Report & Fix Review and Code Review & Testing Analysis.

2016

Cure 53 performed a security audit, published in August 2016.