CVE-2025-4947, CVE-2025-5025 vulnerabilities in libcurl 8.12.1 - Windows

Feedback and Discussion Forum
1

Hi. Vulnerability is present apparently in this version (under 8.14.0.)

Appreciate patching.

Thanks!

2

4947 applied to connecting to naked IP addresses, 5025 applies to pinned certificates – I don’t believe Audacity uses either feature. It’s probably worth updating it next release anyway @kryksyh

3 Likes
3

Aaand libcurl is updated to the latest version, thanks for the report.

I want to ask you to use Github issues for this kind of request, as the devs rarely get on the forum. I know this is unfortunate, but that’s how it is.