A vulnerability identified as critical has been detected in cURL up to 8.16.0. The impacted element is an unknown function of the component wcurl. The manipulation leads to path traversal.
This vulnerability is documented as CVE-2025-11563. The attack can be initiated remotely. There is not any exploit available.
You should upgrade the affected component.
