#curl 8.20.0 has *eight* vulnerabilities fixed (5 x medium, 3 x low) and of course they're all documented in detail on the curl site:

https://curl.se/docs/security.html