Issues

• QUIC on macOS: IPV6_DONTFRAG is never set (needs __APPLE_USE_RFC_3542), so PMTUD probes get fragmented

  appleOSHTTP/3
  curl/curl#23705 · Filter by author pere-at-pere opened on Nov 1, 2026
  5

• IMAP: custom FETCH leaves ")" and the tagged OK unread when the literal is already buffered; they surface as the reply to the next command

  IMAP
  curl/curl#23693 · Filter by author allanvc opened on Oct 30, 2026
  2

• ws: split incoming PING leaks payload to application and truncates auto-PONG

  WebSocket
  curl/curl#23671 · Filter by author intomonx opened on Oct 29, 2026
  2

• FIPS: NTLM and Digest(MD5) auth report misleading errors ("(27) Out of memory", "(2) Failed initialization"), and --anyauth does not fall back to an offered non-MD5 method

  authenticationTLS
  curl/curl#23663 · Filter by author saiharsha1994 opened on Oct 28, 2026
  7

• HTTP/3: while every transfer on a connection is paused, the socket is not read and incoming packets are lost

  HTTP/3
  curl/curl#23635 · Filter by author kasper93 opened on Oct 27, 2026
  1

• Use-after-free in mev_pollset_diff() when curl_multi_remove_handle() is called from a socket callback nested under a notify callback

  crashneeds-info
  curl/curl#23563 · Filter by author azizelbelaychy opened on Oct 22, 2026
  4

• runtests: hung tests keep runtests from finishing

  tests
  curl/curl#23488 · Filter by author vszakats opened on Oct 19, 2026

• wolfSSL: CURLOPT_SSL_VERIFYHOST is not enforced when CURLOPT_SSL_VERIFYPEER is 0

  TLS
  curl/curl#23475 · Filter by author Nora-Qiu opened on Oct 18, 2026
  1

• RTSP: RTP parser state on a reused connection is not reset between sessions

  RTSP
  curl/curl#23473 · Filter by author Nora-Qiu opened on Oct 18, 2026
  4

• curl 8.23.0 causes git to ask for a username for an HTTPS URL that already includes that username

  authenticationneeds-info
  curl/curl#23446 · Filter by author zvova7890 opened on Oct 17, 2026
  8

• Negative DNS cache entries become permanent under CURLOPT_DNS_CACHE_TIMEOUT=-1

  libcurl APIname lookup
  curl/curl#22975 · Filter by author SeanPMiller opened on Sep 17, 2026
  7

• automake < 1.16 doesn't properly generate Makefiles for tests

  buildtests
  curl/curl#22958 · Filter by author jay opened on Sep 15, 2026
  1

• IMAP custom FETCH listing classification skips literal boundaries, enabling response desynchronization

  IMAP
  curl/curl#22865 · Filter by author bagder opened on Sep 7, 2026
  1

• SMTP authentication does not fall back to AUTH LOGIN after another advertised mechanism returns 535

  authenticationSMTP
  curl/curl#22832 · Filter by author ohault opened on Sep 4, 2026
  1

• curl CPU usage waiting for input from stdin

  cmdline toolperformanceWindows
  curl/curl#22640 · Filter by author jay opened on Aug 22, 2026
  6

• IMAP: large SEARCH response fails with CURLE_TOO_LARGE instead of returning results

  IMAPknown-issue
  curl/curl#22435 · Filter by author allanvc opened on Jul 29, 2026

• fopen: 0c667188e0 regression — destination file truncated before temp-file rename, symlink target truncated without O_NOFOLLOW

  curl/curl#21610 · Filter by author MegaManSec opened on May 14, 2026
  5