https://cybertoolchain.io/tools/curl New releases and features in curl, tracked by The Cyber Toolchain. en Wed, 24 Jun 2026 00:00:00 GMT https://curl.se/changes.html https://curl.se/changes.html Wed, 24 Jun 2026 00:00:00 GMT curl 8.21.0 adds named globs for upload filenames and HTTP/3 proxy CONNECT support • Adds MASQUE `CONNECT-UDP` support via ngtcp2 QUIC backend for HTTP/3. Breaking changes: • Drops support for `CURLAUTH_DIGEST_IE` in libcurl. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 29 Apr 2026 00:00:00 GMT curl 8.20.0 adds async thread pool for DNS resolution and makes NTLM default disabled. • lib: add thread pool and queue • build: make NTLM disabled by default Breaking changes: • Dropped support for CMake 3.17 and older • Dropped support for < c-ares 1.16.0 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 11 Mar 2026 00:00:00 GMT curl 8.19.0 adds MQTT over TLS support, fraction limits for --limit-rate/--max-filesize, and new cmake flags. • `tool`: support fractions for `--limit-rate` • `tool`: support fractions for `--max-filesize` • `mqtt`: initial support for MQTTS • `cmake`: add `CURL_BUILD_EVERYTHING` option • `cmake`: add `CURL_DROP_UNUSED` option to reduce binary sizes Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_17_0 https://github.com/curl/curl/releases/tag/curl-8_17_0 Wed, 05 Nov 2025 07:18:19 GMT curl 8.17 adds QUIC v2 support and new --no-alpn flag • Adds `--no-alpn` flag to disable ALPN negotiation for HTTPS connections • Adds initial support for the QUIC v2 protocol Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 05 Nov 2025 00:00:00 GMT curl 8.17.0 adds --knownhosts, multi notifications API, 6-char progress sizes, and %header{} for all occurrences • Adds `--knownhosts` to tool_getparam for outputting the current known_hosts file contents. • Adds a notifications API in the multi interface to signal internal events. • Expands progress display size formatting to use 6 characters per size unit. • Makes `%header{}` able to output all occurrences of a header via write-out formats. Breaking changes: • Drops Heimdal Kerberos support, requiring users who relied on it to switch to MIT Kerberos or other implementations. • Drops the winbuild build system for Windows builds. • Raises the minimum libssh2 requirement to version 1.9.0. • Drops wolfSSH support in vssh. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 10 Sep 2025 00:00:00 GMT curl 8.16.0 adds --follow for HTTP redirects, --parallel-max-host for per-host concurrency limits, and %time{} in writeout • Adds `--follow` flag to curl to enable following HTTP redirects. • Adds `--parallel-max-host <n>` option to limit concurrent connections per host in parallel transfers. • Adds `--out-null` flag to discard the downloaded data entirely. • Adds `%time{}` token to `-w/--write-out` format strings for timing data. • Introduces curl_multi_get_offt() API function in the multi interface. • Adds `CURLMOPT_NETWORK_CHANGED` option in the multi interface to signal network changes. Breaking changes: • Minimum required mingw-w64 version bumped from v1.0 to v3.0. • Minimum required mbedtls version bumped to 3.2.0. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_15_0 https://github.com/curl/curl/releases/tag/curl-8_15_0 Wed, 16 Jul 2025 06:30:51 GMT curl 8.15.0 adds HTTP/3 DNS-over-HTTPS transport support and new protocol options. • Adds support for DNS-over-HTTPS (DoH) over HTTP/3 transports via the `--doh-over-http3` flag • Adds new `--doh-max-retries` option to control DoH retry behavior on HTTP/3 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_14_0 https://github.com/curl/curl/releases/tag/curl-8_14_0 Wed, 28 May 2025 05:47:27 GMT curl 8.14.0 adds QUIC/HTTP3 improvements, new --ip-tos flag, and expands ECH support. • Adds `--ip-tos` flag to set the IP Type-of-Service (ToS) / traffic class byte on outgoing connections. • Supports ECH (Encrypted Client Hello)GreaseEnabled config for improved TLS privacy. • Adds `--vquic-qlog` to enable qlog tracing output for QUIC connections, aiding HTTP/3 debugging. • Adds `curlopt_tcp_keepcnt` / `--keepalive-cnt` to control the number of TCP keepalive probes. • Adds `--ca-native` (and `CURLOPT_CA_NATIVE`) support on more platforms for using the OS native CA store. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 02 Apr 2025 00:00:00 GMT curl 8.13.0 adds TLS early data support, --url file input, IMAP upload flags, and rustls CERTINFO/SSLKEYLOGFILE/ECH capabilities • New write-out variable `tls_earlydata` allows inspecting the status of early data usage in transfer logs. • The `--url` option now accepts a file path containing a list of URLs to process sequentially. • IMAP protocol gains `CURLOPT_UPLOAD_FLAGS` and corresponding `--upload-flags` CLI flag for fine-grained upload control. • rustls backend adds support for `CERTINFO` (certificate information output), `SSLKEYLOGFILE` (key logging for debugging), and ECH with DoH lookup for configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 05 Feb 2025 00:00:00 GMT curl 8.12.0 adds PKCS#11 provider support and QUIC 0RTT for gnutls • enable 0RTT (Early Data) for QUIC connections when using GnuTLS via the new `CURLSSLOPT_EARLYDATA` flag. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_11_0 https://github.com/curl/curl/releases/tag/curl-8_11_0 Wed, 06 Nov 2024 07:18:25 GMT curl 8.11 adds `--resolve`, `--no-sessionid`, and `--tls-srp` for new control surfaces • Adds `--resolve` option to override DNS resolution with a specific IP address. • Adds `--no-sessionid` to disable TLS session ID resumption, forcing a full handshake. • Adds `--tls-srp` and `--tls-srp-username` flags to configure TLS-SRP authentication parameters. • Adds `--tls-use-sha256` to enforce SHA-256 in TLS 1.3 key derivation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_10_0 https://github.com/curl/curl/releases/tag/curl-8_10_0 Wed, 11 Sep 2024 05:53:05 GMT curl 8.10.0 adds SMTP size limits, HTTP/2 PUSH_PROMISE support, and new curl_multi_perform options • Adds the `--max-smtp-pixel` command-line option to limit the number of bytes sent in an SMTP mail transfer • Adds `CURLMOPT_PUSHFUNCTION` to the multi interface API, allowing applications to intercept HTTP/2 PUSH_PROMISE frames • Adds the `CURLINFO_SIZE_DOWNLOAD_T` info option for retrieving download sizes as 64-bit values across all protocols Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 11 Sep 2024 00:00:00 GMT curl 8.10.0 adds --skip-existing, default filenames for -O with missing paths, and libuv parallel transfers. • Add `--skip-existing` flag to prevent overwriting local files that already exist during downloads • Use "default" as the filename when using `-O` and the URL lacks a trailing path component • Add `CURLINFO_POSTTRANSFER_TIME_T` to getinfo for precise post-transfer timing metrics Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_9_0 https://github.com/curl/curl/releases/tag/curl-8_9_0 Wed, 24 Jul 2024 06:37:51 GMT curl 8.9.0 adds --http2-server-priority for HTTP/2 stream prioritization and fixes CVE-2024-7264 • Adds `--http2-server-priority` flag to control HTTP/2 stream priority settings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 24 Jul 2024 00:00:00 GMT curl 8.9.0 adds --ip-tos, --mptcp, --vlan-priority, -w '%{num_retries}', and CURLU_NO_GUESS_SCHEME • Adds `--ip-tos` CLI flag to set IP Type of Service / Traffic Class • Adds `--mptcp` CLI flag to enable Multipath TCP support • Adds `--vlan-priority` CLI flag to set VLAN priority • Adds `-w '%{num_retries}'` write-out variable to report retry counts • Adds `CURLU_NO_GUESS_SCHEME` option to URL API to disable scheme guessing • Adds `CURLOPT_TCP_KEEPCNT` and `--keepalive-cnt` for configuring TCP keepalive count Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_8_0 https://github.com/curl/curl/releases/tag/curl-8_8_0 Wed, 22 May 2024 06:02:33 GMT curl 8.8.0 adds TLS 1.3 post-handshake authentication and new HTTP/3 capabilities • Adds `HSTS_CTRL` and `NO_HSTS` options to the `.curlrc` file for HSTS cache management Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 22 May 2024 00:00:00 GMT curl 8.8.0 adds ECH support, curl_multi_waitfds API, and AppleIDN • TLS: add support for ECH (Encrypted Client Hello) • `file: add support for directory listings` • `idn: add native AppleIDN (icucore) support for macOS/iOS` Breaking changes: • `NTLM_WB: drop support` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 27 Mar 2024 00:00:00 GMT curl 8.7.0 adds SHA-512/256 digest auth, DoH tracing, and proxy usage introspection • `--disable-docs` configure flag to skip documentation build • `CURLINFO_USED_PROXY` info option returns whether a proxy was used • SHA-512/256 support for digest authentication • `%{proxy_used}` format string for `--write-out` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 06 Dec 2023 00:00:00 GMT curl 8.5.0 adds ngtcp2 HTTP/3 support and improved IPFS/IPNS handling • `ngtcp2` builds are no longer experimental for HTTP/3. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_3_0 https://github.com/curl/curl/releases/tag/curl-8_3_0 Wed, 13 Sep 2023 06:25:59 GMT curl 8.3.0 adds SMTP mail sending, IMAP folder creation, and multiple new curl commands • Adds `--mail-from`, `--mail-rcpt`, and `--mail-rcpt-async` options to send emails via SMTP • Adds `IMAP/mkdir` support for creating remote mailboxes • Adds new `--list-only` option for IMAP `LIST` command • Adds new `--disable-epsv` flag to disable EPSV mode in FTP/FTPS transfers • Adds curl_getdate() function and curl_mime_addpart() API functions • Adds support for HTTP Connect tunneling over QUIC with `--quic` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 13 Sep 2023 00:00:00 GMT curl 8.3.0 adds %output{} to -w for file writing, variable support, and global tracing • Adds the `%output{<file>}` format specifier to `--write-out`, allowing output data to be written directly to a specified file instead of stdout. • Introduces `variable` support in the curl tool, enabling access to internal variables via the `--write-out` formatting syntax. Breaking changes: • The `gskit` library support is removed, so builds using it will fail unless disabled or switched to a different TLS backend. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_2_0 https://github.com/curl/curl/releases/tag/curl-8_2_0 Wed, 19 Jul 2023 06:21:33 GMT curl 8.2.0 adds new HTTP/3 priority support, multi-interface event loop callbacks, and more. • `--h3` (and `-0`) now respect the `H3PRIORIZE` environment variable to control whether HTTP/2 or HTTP/3 is prioritized when both are available. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-8_1_0 https://github.com/curl/curl/releases/tag/curl-8_1_0 Wed, 17 May 2023 06:22:06 GMT curl 8.1.0 adds support for HTTP/2 over HTTPS proxy tunnels (H2 over proxy). • Adds support for `--http2` over HTTPS proxies (`https-proxy`), enabling HTTP/2 multiplexing through an intermediate proxy server. • Implements the underlying protocol logic to tunnel HTTP/2 traffic correctly when using `https-proxy`, resolving previous limitations where H2 was ignored or failed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 17 May 2023 00:00:00 GMT curl 8.1.0 adds --proxy-http2 for HTTPS proxies speaking HTTP/2 and URL component variables in --write-out • Adds `--proxy-http2` option (and `CURLPROXY_HTTPS2` enum) to connect to an HTTPS proxy using HTTP/2 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-7_88_0 https://github.com/curl/curl/releases/tag/curl-7_88_0 Wed, 15 Feb 2023 07:25:45 GMT curl 7.88.0 adds HTTP/3 without OpenSSL/Quictls, HSTS preload list updates, and more. • Adds support for HTTP/3 even when not using OpenSSL or Quictls • Updates the built-in HSTS (HTTP Strict Transport Security) preload list Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 15 Feb 2023 00:00:00 GMT curl 7.88.0 adds `--http3-only`, HTTP/3 support to curl_operate, new libcurl options and info codes. • Adds `CURL_HTTP_VERSION_3ONLY` enum for the `CURLOPT_HTTP_VERSION` option • Adds `--http3-only` CLI flag to force HTTP/3 • Adds CURLU_PUNYCODE flag to URL parsing API • Adds %{certs} and %{num_certs} formats in `curl_writeout` for certificate information retrieval Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 21 Dec 2022 00:00:00 GMT curl 7.87.0 adds --url-query, CURLOPT_QUICK_EXIT, and CURL_WRITEFUNC_ERROR • Adds `--url-query` CLI option to append query parameters to the URL. • Adds `CURL_WRITEFUNC_ERROR` constant for write callbacks to signal errors without dumping data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-7_86_0 https://github.com/curl/curl/releases/tag/curl-7_86_0 Wed, 26 Oct 2022 06:23:49 GMT curl 7.86.0 adds WebSocket protocol support via --websocket options • Adds `--websocket`, `-ws-upgrade`, and `-w` options to enable WebSocket client functionality • Supports the WebSocket handshake upgrade sequence automatically when using the new flags Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 26 Oct 2022 00:00:00 GMT curl 7.86.0 adds initial WebSocket support and removes NPN. • Removes NPN (Next Protocol Negotiation) support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 31 Aug 2022 00:00:00 GMT curl 7.85.0 adds QUIC via wolfSSL, TLS 1.3 on Schannel, and STR protocol options • Add `quic` support via the wolfSSL backend for HTTP/3 connectivity • Add `TLS 1.3` support to the Windows Schannel backend • Add `CURLOPT_PROTOCOLS_STR` option to specify allowed protocols as a string • Add `CURLOPT_REDIR_PROTOCOLS_STR` option to specify allowed redirect protocols as a string Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Mon, 27 Jun 2022 00:00:00 GMT curl 7.84.0 adds rate limiting via --rate, unix socket support for SOCKS proxies, and libcurl API additions. • Adds `--rate` flag to limit the maximum request rate per time unit. • Supports unix sockets for SOCKS proxy via new transport layer capability. • Adds `CURL_VERSION_THREADSAFE` to curl_version_info() to indicate thread safety. • Allows querying default CA paths using `CURLINFO_CAPATH` and `CURLINFO_CAINFO` in libcurl. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-7_83_0 https://github.com/curl/curl/releases/tag/curl-7_83_0 Wed, 27 Apr 2022 06:27:51 GMT curl 7.83.0 adds headers-only mode (-I/--head), cookie jar handling with --cookie-jar - (stdin), and HTTP/3 h3 settings. • Enables configuration of HTTP/3 settings using the `--h3-settings` option Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 27 Apr 2022 00:00:00 GMT curl 7.83.0 adds %header and %header_json output formats, --no-clobber, libcurl headers API, and msh3 QUIC support • Adds `%{header{name}}` and `%{header_json}` to the `-w` write-out format for extracting response headers via the CLI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Sat, 05 Mar 2022 00:00:00 GMT curl 7.82.0 adds --json and libssh removal • Adds `--json` CLI option for sending JSON data in requests • Removes support for the mesalink library Breaking changes: • The `mesalink` backend is removed; builds requiring it must use a different TLS library Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://github.com/curl/curl/releases/tag/curl-7_81_0 https://github.com/curl/curl/releases/tag/curl-7_81_0 Wed, 05 Jan 2022 07:59:19 GMT curl 7.81.0 introduces percent-encoded string parsing for headers and auth. • Adds `%` character handling in URL-encoding to allow percent-encoded strings in header values and authentication data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl https://curl.se/changes.html https://curl.se/changes.html Wed, 10 Nov 2021 00:00:00 GMT curl 7.80.0 enhances connection lifecycle control and URL parsing capabilities while extending wolfSSL curve configuration support. • Adds `CURLOPT_MAXLIFETIME_CONN` to limit connection reuse lifetime • Adds `curl_url_strerror()` to the URL API for error reporting • Supports UNC paths in `file:` URLs on Windows via the URL parser • Allows configuring groups/curves for wolfSSL via new callback options Full history on Cyber Toolchain: https://cybertoolchain.io/tools/curl