Skip to content

[VULNERABILITY] libcurl 8.15.0 < 8.18.0 OpenSSL partial chain store policy bypass (CVE-2025-14819) #17869

@Odraio

Description

@Odraio

Is there an existing issue for this?

  • I have searched the existing issues

Description of the Issue

We have identified that the version of libcurl bundled with Notepad++ is 7.87.0 contains known security vulnerabilities. Most importantly, this version is affected by:

  • CVE-2025-14819 – OpenSSL partial chain store policy bypass. This vulnerability impacts all libcurl releases prior to 8.18.0.

Describe the solution you'd like.

Request to update the bundled libcurl dependency to version 8.18.0 or later, which includes the necessary security fixes. Updating to a secure libcurl release is important to ensure that users are not exposed to avoidable risks.

Debug Information

- Install Notepad++ and check the libcurl.dll version in C:\Program Files\Notepad++\updater

Anything else?

No response

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions