FWIW Red Hat 7 / Centos 7 installs lock in at curl 7.29 and YUM updates just patched in security fixes as the third point (7.29.14, 7.29.23, etc.).
The clown car that was Centos 8 didn't help matters as most people (I know...) skipped 8 and stayed on 7 once all that silliness went down. It's not particularly difficult to force curl to upgrade to a more sane version but does require some manual work on your end to do so (repo and command-line stuff).
So, what I'm saying is, if you are rolling with RH/Centos 7 still and never updated curl, you need to force it on through or make the move to a higher OS version (or switch to Ubuntu or Rocky or ???).