# cURL and libcurl

Published articles for cURL and libcurl.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## curl 8.22.0

DevFeed: [curl 8.22.0](<https://devfeed.tech/articles/curl-8-22-0-18904.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/09/02/curl-8-22-0/>)

Author: Daniel Stenberg

Published: 2026-09-02T05:52:46Z

Content type: release

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Security](<https://devfeed.tech/topics/security.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [openssl](<https://devfeed.tech/topics/openssl.md>), [API](<https://devfeed.tech/topics/api.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [bugfixes](<https://devfeed.tech/tags/bugfixes.md>), [command-line](<https://devfeed.tech/tags/command-line.md>), [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cves](<https://devfeed.tech/tags/cves.md>), [http](<https://devfeed.tech/tags/http.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

The curl 8.22.0 release includes six changes, 302 bug fixes, and nine curl/libcurl security fixes plus one wcurl fix. It adds Apple GSS Framework support, API guards, experimental HTTP Message Signatures support, and Apple fast UDP, while blocking NTLM fallback in SPNEGO and dropping TLS-SRP support.

### Source excerpt

Welcome to this new release. Get it as always from https://curl.se. If you rather want a security-patched older release branch, stay tuned for the follow-up Rock-solid curl announcement within a few days. Release presentation Numbers the 276th release6 changes70 days (total: 10,887)302 bugfixes (total: 14,489)525 commits (total: 39,608)0 new public libcurl function (total: 100)4 new ... Continue reading curl 8.22.0 ->

## There's a libcurl.dll in my system32

DevFeed: [There's a libcurl.dll in my system32](<https://devfeed.tech/articles/there-s-a-libcurl-dll-in-my-system32-18903.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/08/17/theres-a-libcurl-dll-in-my-system32/>)

Author: Daniel Stenberg

Published: 2026-08-17T21:27:36Z

Content type: opinion

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Library](<https://devfeed.tech/topics/library.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-scanner](<https://devfeed.tech/tags/vulnerability-scanner.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

The article explains why a vulnerable libcurl.dll found in Windows System32 cannot safely be upgraded generically. Different Windows applications may install or build libcurl separately, so the application owner must identify and update the specific DLL.

### Source excerpt

This afternoon I had a meeting with IT people at a huge US power infrastructure company. They had found a libcurl.dll file in their C:\Windows\System32 directory and asked us for help to upgrade it. Their vulnerability scanner identified it as vulnerable to several publicly known vulnerabilities. Can we bump it to the latest version please? ... Continue reading There's a libcurl.dll in my system32 ->

## curl performance

DevFeed: [curl performance](<https://devfeed.tech/articles/curl-performance-18902.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/08/14/curl-performance-2/>)

Author: Daniel Stenberg

Published: 2026-08-14T11:20:32Z

Content type: opinion

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Performance Testing](<https://devfeed.tech/topics/performance-testing.md>), [Development](<https://devfeed.tech/topics/development.md>), [Shell](<https://devfeed.tech/topics/shell.md>), [Git](<https://devfeed.tech/topics/git.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [git](<https://devfeed.tech/tags/git.md>), [performance](<https://devfeed.tech/tags/performance.md>), [performance-testing](<https://devfeed.tech/tags/performance-testing.md>), [shell-script](<https://devfeed.tech/tags/shell-script.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

This article describes an initial performance-testing effort for curl. It explains the difficulty of obtaining stable results on shared cloud infrastructure and outlines a local shell script that updates curl from git, builds it, runs tests, and records data and logs.

### Source excerpt

tldr: the live version is here: https://curl.se/perf/ How fast is "fast" and is it good enough? Does it run as fast now as it did before or was there a regression? What exactly needs to be fast? How fast is it? These are questions that many projects and products face, and in curl we are ... Continue reading curl performance ->

## curl Maintainers Report on a Month-Long Pause in Vulnerability Reporting

DevFeed: [curl Maintainers Report on a Month-Long Pause in Vulnerability Reporting](<https://devfeed.tech/articles/what-the-bliss-taught-us-18901.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/08/03/what-the-bliss-taught-us/>)

Author: Daniel Stenberg

Published: 2026-08-03T06:42:19Z

Content type: opinion

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

curl maintainers describe the results of pausing vulnerability reporting for the month of July 2026. They report receiving no actionable vulnerability reports during the pause, feeling relief, and using the time to review pull requests, improve documentation, and recharge.

### Source excerpt

At this exact moment curl's summer of bliss 2026 ends. We (the maintainers of curl) took the entire month of July off from vulnerability reporting and in this post I will try to explain how this went. (If you feel like skipping the wordy blab below, the single word answer is: fine) This was possibly ... Continue reading What the bliss taught us ->

## HTTP Message Signatures with curl

DevFeed: [HTTP Message Signatures with curl](<https://devfeed.tech/articles/http-message-signatures-with-curl-18900.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/07/27/http-message-signatures-with-curl/>)

Author: Daniel Stenberg

Published: 2026-07-27T06:55:03Z

Content type: release

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [digital-signatures](<https://devfeed.tech/tags/digital-signatures.md>), [ed25519](<https://devfeed.tech/tags/ed25519.md>), [experimental](<https://devfeed.tech/tags/experimental.md>), [git](<https://devfeed.tech/tags/git.md>), [hmac](<https://devfeed.tech/tags/hmac.md>), [http](<https://devfeed.tech/tags/http.md>), [production](<https://devfeed.tech/tags/production.md>), [release](<https://devfeed.tech/tags/release.md>)

### AI overview

curl experimentally supports HTTP Message Signatures based on RFC 9421, allowing users to sign selected HTTP request components with ed25519 or hmac-sha256 through new command-line and libcurl options. The feature must be explicitly enabled, is discouraged for production use, and is planned for curl 8.22.0.

### Source excerpt

The recently published RFC 9421 describes how to do HTTP Message Signatures, and starting just now, curl experimentally supports them. Message Signatures The specification describes this as a mechanism for creating, encoding, and verifying digital signatures or message authentication codes over components of an HTTP message. It is a way to verify that selected parts ... Continue reading HTTP Message Signatures with curl ->

## 1,500 curl authors

DevFeed: [1,500 curl authors](<https://devfeed.tech/articles/1-500-curl-authors-18899.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/07/25/1500-curl-authors/>)

Author: Daniel Stenberg

Published: 2026-07-25T14:29:28Z

Content type: opinion

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Git](<https://devfeed.tech/topics/git.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [git](<https://devfeed.tech/tags/git.md>)

### AI overview

The curl Git repository now includes contributions from 1,500 separate named individuals. The milestone follows the project surpassing 1,000 contributors four and a half years earlier, with Sameeh Jubran identified as the 1,500th author.

### Source excerpt

It takes a village to make curl. A rather big village. I have not been a solo maintainer of curl for a long time and I don't even do half of the commits anymore Since today, the curl git repository holds the accumulated efforts from 1,500 separate and named individuals. Only 4.5 years since we ... Continue reading 1,500 curl authors ->

## How to submit effective vulnerability reports to open-source projects

DevFeed: [How to submit effective vulnerability reports to open-source projects](<https://devfeed.tech/articles/do-excellent-vulnerability-reports-18895.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/06/29/do-excellent-vulnerability-reports/>)

Author: Daniel Stenberg

Published: 2026-06-29T07:47:43Z

Content type: tutorial

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Security](<https://devfeed.tech/topics/security.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [cve](<https://devfeed.tech/tags/cve.md>), [guide](<https://devfeed.tech/tags/guide.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

This guide explains how to submit effective vulnerability reports to open-source projects, drawing on curl maintainers' experience with more than one thousand reports. It emphasizes describing the real security impact, understanding the software's documented behavior and limitations, and making reports easy for maintainers to handle.

### Source excerpt

Over the years, we have received, read and handled way over one thousand vulnerability reports filed against curl. We have seen most kinds. It is time for me to try to help future reporters by providing a short guide on how to submit a truly excellent vulnerability report to an Open Source project. Researchers We ... Continue reading Do excellent vulnerability reports ->