curl
Overview
CPE
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* Version & Lifecycle
Community Notes
curl Windows PATH, config, and proxy validation note
For managed Windows deployments of curl, be explicit about which curl.exe your scripts use. Modern Windows may already include an inbox curl earlier in PATH, so package detection and post-install validation should check both where curl.exe and curl.exe --version, or call the managed binary by its full path instead of assuming the first curl on PATH is the one you deployed.
For repeatable automation, neutralize user or machine defaults that can change transfer behavior. curl reads a config file by default; add --disable before other options when a scheduled task, ConfigMgr/Intune detection script, or service account must ignore .curlrc/_curlrc. Also account for proxy environment variables such as http_proxy, HTTPS_PROXY, and NO_PROXY, because they can make the same command succeed interactively but fail under the deployment account.
Sources: official curl Windows downloads and command-line documentation.
Release Notes & Updates
Known Vulnerabilities
- CVE-2022-32221 9.8
- CVE-2022-32207 9.8
- CVE-2016-4606 9.8
Also known as
Packaging Notes
Official binary builds available for Windows; source code available on GitHub