Multiple security vulnerabilities were discovered in curl affecting various features including GnuTLS WebSocket handling, AWS SigV4 authentication state, SSH host verification, cookie handling, HTTP proxy authentication, HSTS processing, IMAP command injection, FTP wildcard matching, TFTP transfer validation, file overwrite protection, MIME processing, and HTTP/2 upload handling. These issues could allow attackers to obtain sensitive information, cause denial of service, perform machine-in-the-middle attacks, overwrite local files, or execute arbitrary code. The vulnerabilities are addressed in updated curl packages.