Summary
curl 8.22.0 includes security fixes across curl and libcurl, alongside 302 bug fixes and 525 commits. It adds experimental RFC 9421 HTTP Message Signatures, changes SPNEGO NTLM fallback behaviour and drops TLS-SRP, among other platform and protocol updates.
Why it matters
curl sits beneath countless build, deployment and service integrations, so security and authentication changes can propagate far beyond direct curl users. Teams should review the release notes for SPNEGO, TLS-SRP and signature-related compatibility before broad upgrades.
Related coverage
- JFrog adds AgentSecOps controls across the agentic software supply chain
- CrowdStrike introduces Falcon Guardian for runtime control of AI agents
- F5 and MuleSoft put inline AI guardrails inside Agent Fabric