Curl vulnerability exposes apps to unauthorized access