curl is vulnerable to information disclosure. The vulnerability exists as a part of a password may be prepended to the host name before the host name is resolved, leading to a leak of the partial password over the network and to DNS servers.

CPENameOperatorVersion
curl:3.10eq7.66.0-r0
curl:3.12eq7.69.1-r0
curl:3.11eq7.67.0-r0
curleq7.64.0-r3
curl:bustereq7.64.0-4+deb10u1
curl:edgeeq7.69.0-r0
curl:edgeeq7.69.0-r1
curl:edgeeq7.68.0-r0
curl:edgeeq7.69.1-r0
curl:3.10eq7.66.0-r0

Name	Operator	Version
curl:3.10	eq	7.66.0-r0
curl:3.12	eq	7.69.1-r0
curl:3.11	eq	7.67.0-r0
curl	eq	7.64.0-r3
curl:buster	eq	7.64.0-4+deb10u1
curl:edge	eq	7.69.0-r0
curl:edge	eq	7.69.0-r1
curl:edge	eq	7.68.0-r0
curl:edge	eq	7.69.1-r0
curl:3.10	eq	7.66.0-r0