Is there an existing issue for this?
Description of the Issue
We have identified that the version of libcurl bundled with Notepad++ is 7.87.0 contains known security vulnerabilities. Most importantly, this version is affected by:
- CVE-2025-14819 – OpenSSL partial chain store policy bypass. This vulnerability impacts all libcurl releases prior to 8.18.0.
Describe the solution you'd like.
Request to update the bundled libcurl dependency to version 8.18.0 or later, which includes the necessary security fixes. Updating to a secure libcurl release is important to ensure that users are not exposed to avoidable risks.
Debug Information
- Install Notepad++ and check the libcurl.dll version in C:\Program Files\Notepad++\updater
Anything else?
No response