{"id":"CVE-2026-18924","aliases":["ALPINE-CVE-2026-18924","AZL-99764","AZL-99780","AZL-99801","AZL-99834","AZL-99858","AZL-99879","BELL-CVE-2026-18924","CLSA-2026-1789475946","CLSA-2026-1789566546","CLSA-2026-1789899321","CLSA-2026-1789899690","CLSA-2026-1789899988","CLSA-2026-1789900215","CLSA-2026-1790152441","CLSA-2026-1790154364","CURL-CVE-2026-18924","DEBIAN-CVE-2026-18924","EUVD-2026-72165","GHSA-xcm8-9xjx-f5jq","MGASA-2026-0515","OESA-2026-4124","OESA-2026-4125","OESA-2026-4126","OESA-2026-4127","OESA-2026-4128","RHSA-2026:63161","RHSA-2026:63514","ROOT-OS-ALPINE-315-CVE-2026-18924","ROOT-OS-ALPINE-317-CVE-2026-18924","ROOT-OS-ALPINE-320-CVE-2026-18924","ROOT-OS-ALPINE-321-CVE-2026-18924","ROOT-OS-ALPINE-322-CVE-2026-18924","ROOT-OS-DEBIAN-12-CVE-2026-18924","ROOT-OS-DEBIAN-13-CVE-2026-18924","SUSE-SU-2026:4954-1","SUSE-SU-2026:5068-1","SUSE-SU-2026:5069-1","UBUNTU-CVE-2026-18924","USN-8820-1","openSUSE-SU-2026:11696-1"],"status":"published","title":"HTTP/2 server push UAF","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-08","score":0.00584,"percentile":0.48184,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2026-09-02T08:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"curl","fixed_in":["8.22.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"curl","fixed_in":["8.22.0-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"curl","fixed_in":["8.11.1-12"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"curl","fixed_in":["8.22.0-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"curl","fixed_in":["8.22.0-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"curl","fixed_in":["8.22.0-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"curl","fixed_in":["8.22.0-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"curl","fixed_in":["7.68.0-1ubuntu2.25+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl3-gnutls","fixed_in":["7.68.0-1ubuntu2.25+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl3-nss","fixed_in":["7.68.0-1ubuntu2.25+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4","fixed_in":["7.68.0-1ubuntu2.25+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4-doc","fixed_in":["7.68.0-1ubuntu2.25+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4-gnutls-dev","fixed_in":["7.68.0-1ubuntu2.25+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4-nss-dev","fixed_in":["7.68.0-1ubuntu2.25+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4-openssl-dev","fixed_in":["7.68.0-1ubuntu2.25+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"curl","fixed_in":["7.64.0-4+deb10u9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libcurl3-gnutls","fixed_in":["7.64.0-4+deb10u9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libcurl3-nss","fixed_in":["7.64.0-4+deb10u9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libcurl4","fixed_in":["7.64.0-4+deb10u9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libcurl4-doc","fixed_in":["7.64.0-4+deb10u9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libcurl4-gnutls-dev","fixed_in":["7.64.0-4+deb10u9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libcurl4-nss-dev","fixed_in":["7.64.0-4+deb10u9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libcurl4-openssl-dev","fixed_in":["7.64.0-4+deb10u9+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"curl","fixed_in":["8.22.0~rc2-1"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"curl","fixed_in":["8.5.0-r00073","8.5.0-r00074","8.5.0-r00075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"rootio-curl","fixed_in":["8.5.0-r00073","8.5.0-r00074","8.5.0-r00075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.17","package":"curl","fixed_in":["8.9.0-r00072","8.9.0-r00073","8.9.0-r00074","8.9.0-r00075","8.9.0-r00076","8.9.0-r00077"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.17","package":"rootio-curl","fixed_in":["8.9.0-r00072","8.9.0-r00073","8.9.0-r00074","8.9.0-r00075","8.9.0-r00076","8.9.0-r00077"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"curl","fixed_in":["8.14.1-r200711","8.14.1-r200712"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-curl","fixed_in":["8.14.1-r200711","8.14.1-r200712"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.21","package":"curl","fixed_in":["8.14.1-r30078","8.14.1-r20075","8.14.1-r20076","8.14.1-r20077","8.14.1-r30079","8.14.1-r300710","8.14.1-r300711","8.14.1-r300712"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.21","package":"rootio-curl","fixed_in":["8.14.1-r30078","8.14.1-r20075","8.14.1-r20076","8.14.1-r20077","8.14.1-r30079","8.14.1-r300710","8.14.1-r300711","8.14.1-r300712"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.22","package":"curl","fixed_in":["8.14.1-r400710","8.14.1-r30077","8.14.1-r30078","8.14.1-r30079"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.22","package":"rootio-curl","fixed_in":["8.14.1-r400710","8.14.1-r30077","8.14.1-r30078","8.14.1-r30079"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"curl","fixed_in":["7.88.1-10+deb12u15.aikido.17","7.88.1-10+deb12u15.aikido.18","7.88.1-10+deb12u15.aikido.19","7.88.1-10+deb12u15.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-curl","fixed_in":["7.88.1-10+deb12u15.aikido.17","7.88.1-10+deb12u15.aikido.18","7.88.1-10+deb12u15.aikido.19","7.88.1-10+deb12u15.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"curl","fixed_in":["8.14.1-2+deb13u7.aikido.24","8.14.1-2+deb13u7.aikido.25"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-curl","fixed_in":["8.14.1-2+deb13u7.aikido.24","8.14.1-2+deb13u7.aikido.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"curl","fixed_in":["7.47.0-1ubuntu2.19+esm20"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"curl","fixed_in":["7.58.0-2ubuntu3.24+esm14"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"curl","fixed_in":["7.68.0-1ubuntu2.25+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"curl","fixed_in":["7.81.0-1ubuntu1.29"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"curl","fixed_in":["8.5.0-2ubuntu10.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"curl","fixed_in":["8.20.0-2ubuntu11"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"curl","fixed_in":["8.18.0-1ubuntu2.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.44.0"},{"fixed":"8.22.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.44.0"},{"fixed":"8.22.0-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.11.1-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cmake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.30.3-15"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"8.0.46-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.75.0-30"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.85.0"},{"last_affected":"1.90.0-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"tensorflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.16.1-11"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.0-r2"},{"fixed":"8.22.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.14.0-r1"},{"fixed":"8.22.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.2-r0"},{"fixed":"8.22.0-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.2-r0"},{"fixed":"8.22.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl3-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4-gnutls-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4-nss-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcurl4-openssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libcurl3-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libcurl3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libcurl4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libcurl4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libcurl4-gnutls-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libcurl4-nss-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libcurl4-openssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.64.0-4+deb10u9+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-22.el8.tuxcare.els23"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.61.1-34.el8.tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl3-gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-gnutls-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-nss-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcurl4-openssl-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_6.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"curl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.76.1-31.el9_2.1.tuxcare.els19"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.88.1-10","7.88.1-10+deb12u1","7.88.1-10+deb12u11","7.88.1-10+deb12u12","7.88.1-10+deb12u13","7.88.1-10+deb12u14","7.88.1-10+deb12u15","7.88.1-10+deb12u1~bpo11+1","7.88.1-10+deb12u2","7.88.1-10+deb12u3","7.88.1-10+deb12u3~bpo11+1","7.88.1-10+deb12u4","7.88.1-10+deb12u5","7.88.1-10+deb12u5~bpo11+1","7.88.1-10+deb12u6","7.88.1-10+deb12u6~bpo11+1","7.88.1-10+deb12u7","7.88.1-10+deb12u8","7.88.1-10+deb12u9","7.88.1-11","8.0.1-1~exp1","8.10.0-1","8.10.0-2","8.10.1-1","8.10.1-1~bpo12+1","8.10.1-2","8.11.0-1","8.11.1-1","8.11.1-1~bpo12+1","8.12.0+git20250209.89ed161+ds-1","8.12.0+git20250209.89ed161+ds-1~bpo12+1","8.12.1-1","8.12.1-2","8.12.1-2~bpo12+1","8.12.1-3","8.12.1-3~bpo12+1","8.13.0-1","8.13.0-1+exp1","8.13.0-2","8.13.0-2+exp1","8.13.0-3","8.13.0-4","8.13.0-4+exp1","8.13.0-5","8.13.0-5+exp1","8.13.0-5~bpo12+1","8.13.0~rc-1~exp1","8.13.0~rc-1~exp2","8.13.0~rc2-1","8.13.0~rc2-2","8.13.0~rc3-1","8.13.0~rc3-1+exp1","8.14.0-1","8.14.0-1+exp1","8.14.0~rc1-1+exp1","8.14.0~rc2-1+exp1","8.14.0~rc3-1+exp1","8.14.1-1","8.14.1-1~bpo12+1","8.14.1-2","8.14.1-2+exp1","8.14.1-2~bpo12+1","8.15.0-1","8.15.0-1~bpo13+1","8.15.0-1~exp1","8.15.0~rc1-1exp1","8.15.0~rc2-1~exp1","8.15.0~rc3-1~exp1","8.16.0-1","8.16.0-1+exp1","8.16.0-1~bpo13+1","8.16.0-2","8.16.0-3","8.16.0-4","8.16.0-4~bpo13+1","8.16.0~rc1-1~exp1","8.16.0~rc2-1","8.16.0~rc2-2","8.16.0~rc3-1","8.17.0-1","8.17.0-2","8.17.0-3","8.17.0~rc1-1~exp1","8.17.0~rc2-1","8.17.0~rc3-1","8.18.0-1","8.18.0-1~bpo13+1","8.18.0-2","8.18.0~rc1-1+exp1","8.18.0~rc2-1","8.18.0~rc3-1","8.19.0-1","8.19.0-1+exp1","8.19.0-1~bpo13+1","8.19.0-2","8.19.0-3","8.19.0-3+exp1","8.19.0-3+exp2","8.19.0~rc1-1~exp1","8.19.0~rc2-1","8.19.0~rc2-2","8.19.0~rc3-1","8.2.1-1","8.2.1-2","8.2.1-2~bpo12+1","8.20.0-1","8.20.0-1+exp","8.20.0-2","8.20.0-2+exp1","8.20.0-2~bpo13+1","8.20.0-3","8.20.0-4","8.20.0-5","8.20.0-5~bpo13+1","8.20.0~rc1-1+exp1","8.20.0~rc1-1+exp2","8.20.0~rc1-1+exp3","8.20.0~rc2-1","8.20.0~rc2-1+exp1","8.20.0~rc3-1","8.20.0~rc3-1+exp1","8.21.0-1","8.21.0-1+exp1","8.21.0-2","8.21.0-2+exp1","8.21.0-2~bpo13+1","8.21.0~rc1-1+exp1","8.21.0~rc2-1","8.21.0~rc2-1+exp1","8.21.0~rc3-1","8.21.0~rc3-1+exp1","8.22.0-1","8.22.0-1+exp1","8.22.0~rc2-1","8.22.0~rc2-2","8.22.0~rc3-1","8.22.0~rc3-1+exp1","8.23.0~rc1-1","8.23.0~rc1-2","8.23.0~rc2-1","8.23.0~rc2-1+exp1","8.3.0-1","8.3.0-2","8.3.0-2~bpo12+1","8.3.0-2~exp1","8.3.0-3","8.4.0-1","8.4.0-2","8.4.0-2~bpo12+1","8.5.0-1","8.5.0-1+exp1","8.5.0-2","8.5.0-2+exp1","8.5.0-2~bpo12+1","8.6.0-1","8.6.0-1.1","8.6.0-2","8.6.0-3","8.6.0-3.1","8.6.0-3.1~exp1","8.6.0-3.1~exp2","8.6.0-3.2","8.6.0-4","8.7.1-1","8.7.1-1+exp1","8.7.1-2","8.7.1-3","8.7.1-4","8.7.1-5","8.7.1-5+exp1","8.7.1-5~bpo12+1","8.8.0-1","8.8.0-1+exp1","8.8.0-1+exp2","8.8.0-1~bpo12+1","8.8.0-2","8.8.0-3","8.8.0-4","8.9.0-1","8.9.0-2","8.9.0-3","8.9.1-1","8.9.1-2","8.9.1-2~bpo12+1"]},{"source":"osv","ecosystem":"Debian:13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.14.1-2","8.14.1-2+deb13u1","8.14.1-2+deb13u2","8.14.1-2+deb13u2~bpo13+1","8.14.1-2+deb13u3","8.14.1-2+deb13u4","8.14.1-2+deb13u5","8.14.1-2+exp1","8.15.0-1","8.15.0-1~bpo13+1","8.15.0-1~exp1","8.15.0~rc1-1exp1","8.15.0~rc2-1~exp1","8.15.0~rc3-1~exp1","8.16.0-1","8.16.0-1+exp1","8.16.0-1~bpo13+1","8.16.0-2","8.16.0-3","8.16.0-4","8.16.0-4~bpo13+1","8.16.0~rc1-1~exp1","8.16.0~rc2-1","8.16.0~rc2-2","8.16.0~rc3-1","8.17.0-1","8.17.0-2","8.17.0-3","8.17.0~rc1-1~exp1","8.17.0~rc2-1","8.17.0~rc3-1","8.18.0-1","8.18.0-1~bpo13+1","8.18.0-2","8.18.0~rc1-1+exp1","8.18.0~rc2-1","8.18.0~rc3-1","8.19.0-1","8.19.0-1+exp1","8.19.0-1~bpo13+1","8.19.0-2","8.19.0-3","8.19.0-3+exp1","8.19.0-3+exp2","8.19.0~rc1-1~exp1","8.19.0~rc2-1","8.19.0~rc2-2","8.19.0~rc3-1","8.20.0-1","8.20.0-1+exp","8.20.0-2","8.20.0-2+exp1","8.20.0-2~bpo13+1","8.20.0-3","8.20.0-4","8.20.0-5","8.20.0-5~bpo13+1","8.20.0~rc1-1+exp1","8.20.0~rc1-1+exp2","8.20.0~rc1-1+exp3","8.20.0~rc2-1","8.20.0~rc2-1+exp1","8.20.0~rc3-1","8.20.0~rc3-1+exp1","8.21.0-1","8.21.0-1+exp1","8.21.0-2","8.21.0-2+exp1","8.21.0-2~bpo13+1","8.21.0~rc1-1+exp1","8.21.0~rc2-1","8.21.0~rc2-1+exp1","8.21.0~rc3-1","8.21.0~rc3-1+exp1","8.22.0-1","8.22.0-1+exp1","8.22.0~rc2-1","8.22.0~rc2-2","8.22.0~rc3-1","8.22.0~rc3-1+exp1","8.23.0~rc1-1","8.23.0~rc1-2","8.23.0~rc2-1","8.23.0~rc2-1+exp1"]},{"source":"osv","ecosystem":"Debian:14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.22.0~rc2-1"}]}],"versions":["8.14.1-2","8.14.1-2+exp1","8.15.0-1","8.15.0-1~bpo13+1","8.15.0-1~exp1","8.15.0~rc1-1exp1","8.15.0~rc2-1~exp1","8.15.0~rc3-1~exp1","8.16.0-1","8.16.0-1+exp1","8.16.0-1~bpo13+1","8.16.0-2","8.16.0-3","8.16.0-4","8.16.0-4~bpo13+1","8.16.0~rc1-1~exp1","8.16.0~rc2-1","8.16.0~rc2-2","8.16.0~rc3-1","8.17.0-1","8.17.0-2","8.17.0-3","8.17.0~rc1-1~exp1","8.17.0~rc2-1","8.17.0~rc3-1","8.18.0-1","8.18.0-1~bpo13+1","8.18.0-2","8.18.0~rc1-1+exp1","8.18.0~rc2-1","8.18.0~rc3-1","8.19.0-1","8.19.0-1+exp1","8.19.0-1~bpo13+1","8.19.0-2","8.19.0-3","8.19.0-3+exp1","8.19.0-3+exp2","8.19.0~rc1-1~exp1","8.19.0~rc2-1","8.19.0~rc2-2","8.19.0~rc3-1","8.20.0-1","8.20.0-1+exp","8.20.0-2","8.20.0-2+exp1","8.20.0-2~bpo13+1","8.20.0-3","8.20.0-4","8.20.0-5","8.20.0-5~bpo13+1","8.20.0~rc1-1+exp1","8.20.0~rc1-1+exp2","8.20.0~rc1-1+exp3","8.20.0~rc2-1","8.20.0~rc2-1+exp1","8.20.0~rc3-1","8.20.0~rc3-1+exp1","8.21.0-1","8.21.0-1+exp1","8.21.0-2","8.21.0-2+exp1","8.21.0-2~bpo13+1","8.21.0~rc1-1+exp1","8.21.0~rc2-1","8.21.0~rc2-1+exp1","8.21.0~rc3-1","8.21.0~rc3-1+exp1"]},{"source":"osv","ecosystem":"Mageia:10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.23.0-1.mga10"}]}],"bundled":31},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.71.1-54.oe2003sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.79.1-56.oe2203sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-37.oe2403sp1"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-37.oe2403sp3"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-37.oe2403sp4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.22.0-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.22.0-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.22.0-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.22.0-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static-aarch64-unknown-none-softfloat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static-aarch64-unknown-uefi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static-i686-pc-windows-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static-wasm32-wasip1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static-x86_64-pc-windows-gnu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static-x86_64-unknown-none","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rust-std-static-x86_64-unknown-uefi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.98.0-1.hum1"}]}],"bundled":3},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.0-r00073"},{"fixed":"8.5.0-r00074"},{"fixed":"8.5.0-r00075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.0-r00073"},{"fixed":"8.5.0-r00074"},{"fixed":"8.5.0-r00075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.17","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.0-r00072"},{"fixed":"8.9.0-r00073"},{"fixed":"8.9.0-r00074"},{"fixed":"8.9.0-r00075"},{"fixed":"8.9.0-r00076"},{"fixed":"8.9.0-r00077"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.17","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.9.0-r00072"},{"fixed":"8.9.0-r00073"},{"fixed":"8.9.0-r00074"},{"fixed":"8.9.0-r00075"},{"fixed":"8.9.0-r00076"},{"fixed":"8.9.0-r00077"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r200711"},{"fixed":"8.14.1-r200712"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r200711"},{"fixed":"8.14.1-r200712"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.21","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r30078"},{"fixed":"8.14.1-r20075"},{"fixed":"8.14.1-r20076"},{"fixed":"8.14.1-r20077"},{"fixed":"8.14.1-r30079"},{"fixed":"8.14.1-r300710"},{"fixed":"8.14.1-r300711"},{"fixed":"8.14.1-r300712"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.21","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r30078"},{"fixed":"8.14.1-r20075"},{"fixed":"8.14.1-r20076"},{"fixed":"8.14.1-r20077"},{"fixed":"8.14.1-r30079"},{"fixed":"8.14.1-r300710"},{"fixed":"8.14.1-r300711"},{"fixed":"8.14.1-r300712"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.22","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r400710"},{"fixed":"8.14.1-r30077"},{"fixed":"8.14.1-r30078"},{"fixed":"8.14.1-r30079"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.22","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r400710"},{"fixed":"8.14.1-r30077"},{"fixed":"8.14.1-r30078"},{"fixed":"8.14.1-r30079"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.88.1-10+deb12u15.aikido.17"},{"fixed":"7.88.1-10+deb12u15.aikido.18"},{"fixed":"7.88.1-10+deb12u15.aikido.19"},{"fixed":"7.88.1-10+deb12u15.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.88.1-10+deb12u15.aikido.17"},{"fixed":"7.88.1-10+deb12u15.aikido.18"},{"fixed":"7.88.1-10+deb12u15.aikido.19"},{"fixed":"7.88.1-10+deb12u15.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-2+deb13u7.aikido.24"},{"fixed":"8.14.1-2+deb13u7.aikido.25"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-2+deb13u7.aikido.24"},{"fixed":"8.14.1-2+deb13u7.aikido.25"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.98.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.22.0-150700.7.33.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.22.0-150600.4.58.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.22.0-150600.4.58.1"}]}],"bundled":31},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.19+esm20"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7","7.47.0-1ubuntu2.8","7.47.0-1ubuntu2.9","7.47.0-1ubuntu2.11","7.47.0-1ubuntu2.12","7.47.0-1ubuntu2.13","7.47.0-1ubuntu2.14","7.47.0-1ubuntu2.15","7.47.0-1ubuntu2.16","7.47.0-1ubuntu2.18","7.47.0-1ubuntu2.19","7.47.0-1ubuntu2.19+esm1","7.47.0-1ubuntu2.19+esm2","7.47.0-1ubuntu2.19+esm3","7.47.0-1ubuntu2.19+esm4","7.47.0-1ubuntu2.19+esm5","7.47.0-1ubuntu2.19+esm6","7.47.0-1ubuntu2.19+esm7","7.47.0-1ubuntu2.19+esm8","7.47.0-1ubuntu2.19+esm9","7.47.0-1ubuntu2.19+esm10","7.47.0-1ubuntu2.19+esm11","7.47.0-1ubuntu2.19+esm12","7.47.0-1ubuntu2.19+esm13","7.47.0-1ubuntu2.19+esm15","7.47.0-1ubuntu2.19+esm16","7.47.0-1ubuntu2.19+esm17","7.47.0-1ubuntu2.19+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+esm14"}]}],"versions":["7.55.1-1ubuntu2","7.55.1-1ubuntu2.1","7.57.0-1ubuntu1","7.58.0-2ubuntu1","7.58.0-2ubuntu2","7.58.0-2ubuntu3","7.58.0-2ubuntu3.1","7.58.0-2ubuntu3.2","7.58.0-2ubuntu3.3","7.58.0-2ubuntu3.5","7.58.0-2ubuntu3.6","7.58.0-2ubuntu3.7","7.58.0-2ubuntu3.8","7.58.0-2ubuntu3.9","7.58.0-2ubuntu3.10","7.58.0-2ubuntu3.12","7.58.0-2ubuntu3.13","7.58.0-2ubuntu3.14","7.58.0-2ubuntu3.15","7.58.0-2ubuntu3.16","7.58.0-2ubuntu3.17","7.58.0-2ubuntu3.18","7.58.0-2ubuntu3.19","7.58.0-2ubuntu3.20","7.58.0-2ubuntu3.21","7.58.0-2ubuntu3.22","7.58.0-2ubuntu3.23","7.58.0-2ubuntu3.24","7.58.0-2ubuntu3.24+esm1","7.58.0-2ubuntu3.24+esm2","7.58.0-2ubuntu3.24+esm3","7.58.0-2ubuntu3.24+esm4","7.58.0-2ubuntu3.24+esm5","7.58.0-2ubuntu3.24+esm7","7.58.0-2ubuntu3.24+esm8","7.58.0-2ubuntu3.24+esm9","7.58.0-2ubuntu3.24+esm10","7.58.0-2ubuntu3.24+esm11","7.58.0-2ubuntu3.24+esm12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+esm9"}]}],"versions":["7.65.3-1ubuntu3","7.65.3-1ubuntu4","7.66.0-1ubuntu1","7.67.0-2ubuntu1","7.68.0-1ubuntu1","7.68.0-1ubuntu2","7.68.0-1ubuntu2.1","7.68.0-1ubuntu2.2","7.68.0-1ubuntu2.4","7.68.0-1ubuntu2.5","7.68.0-1ubuntu2.6","7.68.0-1ubuntu2.7","7.68.0-1ubuntu2.10","7.68.0-1ubuntu2.11","7.68.0-1ubuntu2.12","7.68.0-1ubuntu2.13","7.68.0-1ubuntu2.14","7.68.0-1ubuntu2.15","7.68.0-1ubuntu2.16","7.68.0-1ubuntu2.18","7.68.0-1ubuntu2.19","7.68.0-1ubuntu2.20","7.68.0-1ubuntu2.21","7.68.0-1ubuntu2.22","7.68.0-1ubuntu2.23","7.68.0-1ubuntu2.24","7.68.0-1ubuntu2.25","7.68.0-1ubuntu2.25+esm2","7.68.0-1ubuntu2.25+esm3","7.68.0-1ubuntu2.25+esm4","7.68.0-1ubuntu2.25+esm5","7.68.0-1ubuntu2.25+esm6","7.68.0-1ubuntu2.25+esm7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.81.0-1ubuntu1.29"}]}],"versions":["7.74.0-1.3ubuntu2","7.74.0-1.3ubuntu3","7.80.0-3","7.81.0-1","7.81.0-1ubuntu1.1","7.81.0-1ubuntu1.2","7.81.0-1ubuntu1.3","7.81.0-1ubuntu1.4","7.81.0-1ubuntu1.6","7.81.0-1ubuntu1.7","7.81.0-1ubuntu1.8","7.81.0-1ubuntu1.10","7.81.0-1ubuntu1.11","7.81.0-1ubuntu1.13","7.81.0-1ubuntu1.14","7.81.0-1ubuntu1.15","7.81.0-1ubuntu1.16","7.81.0-1ubuntu1.17","7.81.0-1ubuntu1.18","7.81.0-1ubuntu1.19","7.81.0-1ubuntu1.20","7.81.0-1ubuntu1.21","7.81.0-1ubuntu1.22","7.81.0-1ubuntu1.23","7.81.0-1ubuntu1.24","7.81.0-1ubuntu1.25","7.81.0-1ubuntu1.26","7.81.0-1ubuntu1.27"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.0-2ubuntu10.15"}]}],"versions":["8.2.1-1ubuntu3","8.2.1-1ubuntu3.1","8.4.0-2ubuntu1","8.5.0-2ubuntu1","8.5.0-2ubuntu2","8.5.0-2ubuntu8","8.5.0-2ubuntu9","8.5.0-2ubuntu10","8.5.0-2ubuntu10.1","8.5.0-2ubuntu10.2","8.5.0-2ubuntu10.3","8.5.0-2ubuntu10.4","8.5.0-2ubuntu10.5","8.5.0-2ubuntu10.6","8.5.0-2ubuntu10.7","8.5.0-2ubuntu10.8","8.5.0-2ubuntu10.9","8.5.0-2ubuntu10.10","8.5.0-2ubuntu10.11","8.5.0-2ubuntu10.12","8.5.0-2ubuntu10.13"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20.0-2ubuntu11"}]}],"versions":["8.18.0-1ubuntu2","8.20.0-2ubuntu1","8.20.0-2ubuntu3","8.20.0-2ubuntu10"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.18.0-1ubuntu2.7"}]}],"versions":["8.14.1-2ubuntu1","8.17.0-1ubuntu1","8.18.0-1ubuntu1","8.18.0-1ubuntu2","8.18.0-1ubuntu2.1","8.18.0-1ubuntu2.2","8.18.0-1ubuntu2.3","8.18.0-1ubuntu2.4","8.18.0-1ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.19+esm20"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7","7.47.0-1ubuntu2.8","7.47.0-1ubuntu2.9","7.47.0-1ubuntu2.11","7.47.0-1ubuntu2.12","7.47.0-1ubuntu2.13","7.47.0-1ubuntu2.14","7.47.0-1ubuntu2.15","7.47.0-1ubuntu2.16","7.47.0-1ubuntu2.18","7.47.0-1ubuntu2.19","7.47.0-1ubuntu2.19+esm1","7.47.0-1ubuntu2.19+esm2","7.47.0-1ubuntu2.19+esm3","7.47.0-1ubuntu2.19+esm4","7.47.0-1ubuntu2.19+esm5","7.47.0-1ubuntu2.19+esm6","7.47.0-1ubuntu2.19+esm7","7.47.0-1ubuntu2.19+esm8","7.47.0-1ubuntu2.19+esm9","7.47.0-1ubuntu2.19+esm10","7.47.0-1ubuntu2.19+esm11","7.47.0-1ubuntu2.19+esm12","7.47.0-1ubuntu2.19+esm13","7.47.0-1ubuntu2.19+esm15","7.47.0-1ubuntu2.19+esm16","7.47.0-1ubuntu2.19+esm17","7.47.0-1ubuntu2.19+esm18"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.24+esm14"}]}],"versions":["7.55.1-1ubuntu2","7.55.1-1ubuntu2.1","7.57.0-1ubuntu1","7.58.0-2ubuntu1","7.58.0-2ubuntu2","7.58.0-2ubuntu3","7.58.0-2ubuntu3.1","7.58.0-2ubuntu3.2","7.58.0-2ubuntu3.3","7.58.0-2ubuntu3.5","7.58.0-2ubuntu3.6","7.58.0-2ubuntu3.7","7.58.0-2ubuntu3.8","7.58.0-2ubuntu3.9","7.58.0-2ubuntu3.10","7.58.0-2ubuntu3.12","7.58.0-2ubuntu3.13","7.58.0-2ubuntu3.14","7.58.0-2ubuntu3.15","7.58.0-2ubuntu3.16","7.58.0-2ubuntu3.17","7.58.0-2ubuntu3.18","7.58.0-2ubuntu3.19","7.58.0-2ubuntu3.20","7.58.0-2ubuntu3.21","7.58.0-2ubuntu3.22","7.58.0-2ubuntu3.23","7.58.0-2ubuntu3.24","7.58.0-2ubuntu3.24+esm1","7.58.0-2ubuntu3.24+esm2","7.58.0-2ubuntu3.24+esm3","7.58.0-2ubuntu3.24+esm4","7.58.0-2ubuntu3.24+esm5","7.58.0-2ubuntu3.24+esm7","7.58.0-2ubuntu3.24+esm8","7.58.0-2ubuntu3.24+esm9","7.58.0-2ubuntu3.24+esm10","7.58.0-2ubuntu3.24+esm11","7.58.0-2ubuntu3.24+esm12"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.68.0-1ubuntu2.25+esm9"}]}],"versions":["7.65.3-1ubuntu3","7.65.3-1ubuntu4","7.66.0-1ubuntu1","7.67.0-2ubuntu1","7.68.0-1ubuntu1","7.68.0-1ubuntu2","7.68.0-1ubuntu2.1","7.68.0-1ubuntu2.2","7.68.0-1ubuntu2.4","7.68.0-1ubuntu2.5","7.68.0-1ubuntu2.6","7.68.0-1ubuntu2.7","7.68.0-1ubuntu2.10","7.68.0-1ubuntu2.11","7.68.0-1ubuntu2.12","7.68.0-1ubuntu2.13","7.68.0-1ubuntu2.14","7.68.0-1ubuntu2.15","7.68.0-1ubuntu2.16","7.68.0-1ubuntu2.18","7.68.0-1ubuntu2.19","7.68.0-1ubuntu2.20","7.68.0-1ubuntu2.21","7.68.0-1ubuntu2.22","7.68.0-1ubuntu2.23","7.68.0-1ubuntu2.24","7.68.0-1ubuntu2.25","7.68.0-1ubuntu2.25+esm2","7.68.0-1ubuntu2.25+esm3","7.68.0-1ubuntu2.25+esm4","7.68.0-1ubuntu2.25+esm5","7.68.0-1ubuntu2.25+esm6","7.68.0-1ubuntu2.25+esm7"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.81.0-1ubuntu1.29"}]}],"versions":["7.74.0-1.3ubuntu2","7.74.0-1.3ubuntu3","7.80.0-3","7.81.0-1","7.81.0-1ubuntu1.1","7.81.0-1ubuntu1.2","7.81.0-1ubuntu1.3","7.81.0-1ubuntu1.4","7.81.0-1ubuntu1.6","7.81.0-1ubuntu1.7","7.81.0-1ubuntu1.8","7.81.0-1ubuntu1.10","7.81.0-1ubuntu1.11","7.81.0-1ubuntu1.13","7.81.0-1ubuntu1.14","7.81.0-1ubuntu1.15","7.81.0-1ubuntu1.16","7.81.0-1ubuntu1.17","7.81.0-1ubuntu1.18","7.81.0-1ubuntu1.19","7.81.0-1ubuntu1.20","7.81.0-1ubuntu1.21","7.81.0-1ubuntu1.22","7.81.0-1ubuntu1.23","7.81.0-1ubuntu1.24","7.81.0-1ubuntu1.25","7.81.0-1ubuntu1.26","7.81.0-1ubuntu1.27"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.0-2ubuntu10.15"}]}],"versions":["8.2.1-1ubuntu3","8.2.1-1ubuntu3.1","8.4.0-2ubuntu1","8.5.0-2ubuntu1","8.5.0-2ubuntu2","8.5.0-2ubuntu8","8.5.0-2ubuntu9","8.5.0-2ubuntu10","8.5.0-2ubuntu10.1","8.5.0-2ubuntu10.2","8.5.0-2ubuntu10.3","8.5.0-2ubuntu10.4","8.5.0-2ubuntu10.5","8.5.0-2ubuntu10.6","8.5.0-2ubuntu10.7","8.5.0-2ubuntu10.8","8.5.0-2ubuntu10.9","8.5.0-2ubuntu10.10","8.5.0-2ubuntu10.11","8.5.0-2ubuntu10.12","8.5.0-2ubuntu10.13"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.18.0-1ubuntu2.7"}]}],"versions":["8.14.1-2ubuntu1","8.17.0-1ubuntu1","8.18.0-1ubuntu1","8.18.0-1ubuntu2","8.18.0-1ubuntu2.1","8.18.0-1ubuntu2.2","8.18.0-1ubuntu2.3","8.18.0-1ubuntu2.4","8.18.0-1ubuntu2.5"],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.22.0-1.1"}]}],"bundled":7}],"products":[{"vendor":"curl","product":"curl"},{"vendor":"haxx","product":"curl"}],"references":[{"url":"https://curl.se/docs/CVE-2026-18924.json","tags":["Vendor Advisory","web","article"]},{"url":"https://curl.se/docs/CVE-2026-18924.html","tags":["Patch","Vendor Advisory","web","article","report"]},{"url":"https://hackerone.com/reports/3916059","tags":["exploit","Exploit","Mitigation","Third Party Advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18924","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-xcm8-9xjx-f5jq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-18924","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-18924","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1789475946.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1789566546.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1789899321.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82209","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1789899690.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1789899988.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1789900215.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790152441.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1790154364.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/18xxx/CVE-2026-18924.json","tags":["advisory"]},{"url":"https://github.com/curl/curl.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-18924","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0515.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36250","tags":["report"]},{"url":"https://curl.se/docs/security.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4124","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19931","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80231","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4125","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13608","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4127","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4128","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63161","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19931","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-13608","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-18924","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-82209","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80231","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80230","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80229","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80255","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63161.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-13608","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2026-13608.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-13608.json","tags":["article"]},{"url":"https://hackerone.com/reports/3822248","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18924","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529199","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19931","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2026-19931.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-19931.json","tags":["article"]},{"url":"https://hackerone.com/reports/3923520","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529206","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80229","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2026-80229.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-80229.json","tags":["article"]},{"url":"https://hackerone.com/reports/3969255","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80230","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2026-80230.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-80230.json","tags":["article"]},{"url":"https://hackerone.com/reports/3969300","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80231","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2026-80231.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-80231.json","tags":["article"]},{"url":"https://hackerone.com/reports/3969368","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529205","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80255","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2026-80255.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-80255.json","tags":["article"]},{"url":"https://hackerone.com/reports/3972395","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-82209","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2026-82209.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-82209.json","tags":["article"]},{"url":"https://hackerone.com/reports/3972385","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63514","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63514.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264954-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268414","tags":["report"]},{"url":"https://bugzilla.suse.com/1268426","tags":["report"]},{"url":"https://bugzilla.suse.com/1277477","tags":["report"]},{"url":"https://bugzilla.suse.com/1277478","tags":["report"]},{"url":"https://bugzilla.suse.com/1277482","tags":["report"]},{"url":"https://bugzilla.suse.com/1278173","tags":["report"]},{"url":"https://bugzilla.suse.com/1285008","tags":["report"]},{"url":"https://bugzilla.suse.com/1285010","tags":["report"]},{"url":"https://bugzilla.suse.com/1285012","tags":["report"]},{"url":"https://bugzilla.suse.com/1285013","tags":["report"]},{"url":"https://bugzilla.suse.com/1285014","tags":["report"]},{"url":"https://bugzilla.suse.com/1285015","tags":["report"]},{"url":"https://bugzilla.suse.com/1285016","tags":["report"]},{"url":"https://bugzilla.suse.com/1285017","tags":["report"]},{"url":"https://bugzilla.suse.com/1285018","tags":["report"]},{"url":"https://bugzilla.suse.com/1285021","tags":["report"]},{"url":"https://bugzilla.suse.com/1285022","tags":["report"]},{"url":"https://bugzilla.suse.com/1285023","tags":["report"]},{"url":"https://bugzilla.suse.com/1285026","tags":["report"]},{"url":"https://bugzilla.suse.com/1285030","tags":["report"]},{"url":"https://bugzilla.suse.com/1285031","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-82209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-94266","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265068-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268419","tags":["report"]},{"url":"https://bugzilla.suse.com/1268423","tags":["report"]},{"url":"https://bugzilla.suse.com/1268424","tags":["report"]},{"url":"https://bugzilla.suse.com/1268425","tags":["report"]},{"url":"https://bugzilla.suse.com/1268427","tags":["report"]},{"url":"https://bugzilla.suse.com/1285011","tags":["report"]},{"url":"https://bugzilla.suse.com/1285024","tags":["report"]},{"url":"https://bugzilla.suse.com/1285027","tags":["report"]},{"url":"https://bugzilla.suse.com/1285028","tags":["report"]},{"url":"https://bugzilla.suse.com/1285029","tags":["report"]},{"url":"https://bugzilla.suse.com/1287781","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-86413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-87861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-94265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9546","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265069-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-18924","tags":["report"]},{"url":"https://github.com/curl/curl/commit/90325ff0444cbdff368bda5d26d6","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8820-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-8927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-9080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-13608","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-82209","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80230","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-18924","title":"HTTP/2 server push UAF","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T17:47:27.82Z","modified":"2026-09-15T06:02:47.329Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-416","CWE-416"],"updated_at":"2026-11-02T14:20:12.260247Z"}],"euvd":[{"id":"EUVD-2026-72165","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T17:47:27Z","modified":"2026-09-15T06:02:47Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:28:19.01786Z"}],"ghsa":[{"id":"GHSA-xcm8-9xjx-f5jq","title":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to...","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:34:39Z","modified":"2026-09-08T18:32:51Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:11:31.116638Z"}],"nvd":[{"id":"CVE-2026-18924","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20.553Z","modified":"2026-09-15T07:16:27.063Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:12:44.082631Z"}],"osv":[{"id":"ALPINE-CVE-2026-18924","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20.553Z","modified":"2026-10-01T02:17:49.196229562Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2026-18924","status":"published","published":"2026-09-04T06:05:07.12037Z","modified":"2026-09-10T07:15:05.587844575Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2026-18924","title":"HTTP/2 server push UAF","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T17:47:27.82Z","modified":"2026-11-03T22:56:57.89119905Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-03T23:33:36.422322Z"},{"id":"DEBIAN-CVE-2026-18924","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20.553Z","modified":"2026-10-01T03:02:55.359149822Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:53.097669Z"},{"id":"OESA-2026-4124","title":"curl security update","description":"cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.\r\n\r\nSecurity Fix(es):\n\nSuccessfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`.(CVE-2026-11856)\n\nA flaw in libcurl\u0026apos;s handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.(CVE-2026-18924)\n\nA flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B\u0026apos;s request get sent over user A\u0026apos;s\npreviously authenticated connection.(CVE-2026-19931)\n\nWhen `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable\nstandard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and\n`CURLOPT_SSL_VERIFYHOST = 0`), libcurl fails to enforce public key pinning on\nconnections established without a presented server certificate. Bypassing the\npinning check under these disabled-verification conditions allows\nunauthenticated connections to succeed when they should be rejected.(CVE-2026-80230)\n\nA flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup\nfor a given hostname even when using a different Native CA Store setting\n(`CURLSSLOPT_NATIVE_CA`) than when the connection was created.(CVE-2026-80231)\n\nWhen libpsl support is enabled, libcurl fails to enforce the Public Suffix\nList boundary check when processing a `Set-Cookie` header where the `Domain`\nattribute explicitly matches an origin host that is itself a public suffix\n(e.g., `Domain=co.uk` set by `co.uk`).\n\nInstead of coercing it into a strict host-only cookie, libcurl saves the\ncookie with wildcard domain scope (`.co.uk`). Consequently, the cookie is\ninappropriately included in subsequent outbound requests or HTTP redirects to\narbitrary sibling subdomains under the same public suffix (e.g.,\n`attacker.co.uk`).(CVE-2026-82209)","status":"published","published":"2026-09-25T01:28:45Z","modified":"2026-09-25T01:45:14.616534315Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4125","title":"curl security update","description":"cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.\r\n\r\nSecurity Fix(es):\n\nSuccessfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`.(CVE-2026-11856)\n\nA flaw in libcurl\u0026apos;s handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.(CVE-2026-18924)\n\nA flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B\u0026apos;s request get sent over user A\u0026apos;s\npreviously authenticated connection.(CVE-2026-19931)\n\nWhen `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable\nstandard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and\n`CURLOPT_SSL_VERIFYHOST = 0`), libcurl fails to enforce public key pinning on\nconnections established without a presented server certificate. Bypassing the\npinning check under these disabled-verification conditions allows\nunauthenticated connections to succeed when they should be rejected.(CVE-2026-80230)\n\nA flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup\nfor a given hostname even when using a different Native CA Store setting\n(`CURLSSLOPT_NATIVE_CA`) than when the connection was created.(CVE-2026-80231)\n\nWhen libpsl support is enabled, libcurl fails to enforce the Public Suffix\nList boundary check when processing a `Set-Cookie` header where the `Domain`\nattribute explicitly matches an origin host that is itself a public suffix\n(e.g., `Domain=co.uk` set by `co.uk`).\n\nInstead of coercing it into a strict host-only cookie, libcurl saves the\ncookie with wildcard domain scope (`.co.uk`). Consequently, the cookie is\ninappropriately included in subsequent outbound requests or HTTP redirects to\narbitrary sibling subdomains under the same public suffix (e.g.,\n`attacker.co.uk`).(CVE-2026-82209)","status":"published","published":"2026-09-25T01:28:45Z","modified":"2026-09-25T01:45:09.204392978Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4126","title":"curl security update","description":"cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.\r\n\r\nSecurity Fix(es):\n\nSuccessfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`.(CVE-2026-11856)\n\nA flaw in the libcurl SASL negotiation for LDAP authentication allows an\nincomplete handshake sequence to be misinterpreted as a successful\ncryptographic verification. An attacker executing a Man-in-the-Middle (MITM)\nattack can inject a premature or shortcut response that bypasses complete peer\nvalidation.(CVE-2026-13608)\n\nA flaw in libcurl\u0026apos;s handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.(CVE-2026-18924)\n\nA flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B\u0026apos;s request get sent over user A\u0026apos;s\npreviously authenticated connection.(CVE-2026-19931)\n\nWhen `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable\nstandard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and\n`CURLOPT_SSL_VERIFYHOST = 0`), libcurl fails to enforce public key pinning on\nconnections established without a presented server certificate. Bypassing the\npinning check under these disabled-verification conditions allows\nunauthenticated connections to succeed when they should be rejected.(CVE-2026-80230)\n\nA flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup\nfor a given hostname even when using a different Native CA Store setting\n(`CURLSSLOPT_NATIVE_CA`) than when the connection was created.(CVE-2026-80231)\n\nWhen libpsl support is enabled, libcurl fails to enforce the Public Suffix\nList boundary check when processing a `Set-Cookie` header where the `Domain`\nattribute explicitly matches an origin host that is itself a public suffix\n(e.g., `Domain=co.uk` set by `co.uk`).\n\nInstead of coercing it into a strict host-only cookie, libcurl saves the\ncookie with wildcard domain scope (`.co.uk`). Consequently, the cookie is\ninappropriately included in subsequent outbound requests or HTTP redirects to\narbitrary sibling subdomains under the same public suffix (e.g.,\n`attacker.co.uk`).(CVE-2026-82209)","status":"published","published":"2026-09-25T01:28:47Z","modified":"2026-09-25T01:45:13.706912325Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4127","title":"curl security update","description":"cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.\r\n\r\nSecurity Fix(es):\n\nSuccessfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`.(CVE-2026-11856)\n\nA flaw in the libcurl SASL negotiation for LDAP authentication allows an\nincomplete handshake sequence to be misinterpreted as a successful\ncryptographic verification. An attacker executing a Man-in-the-Middle (MITM)\nattack can inject a premature or shortcut response that bypasses complete peer\nvalidation.(CVE-2026-13608)\n\nA flaw in libcurl\u0026apos;s handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.(CVE-2026-18924)\n\nA flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B\u0026apos;s request get sent over user A\u0026apos;s\npreviously authenticated connection.(CVE-2026-19931)\n\nWhen `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable\nstandard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and\n`CURLOPT_SSL_VERIFYHOST = 0`), libcurl fails to enforce public key pinning on\nconnections established without a presented server certificate. Bypassing the\npinning check under these disabled-verification conditions allows\nunauthenticated connections to succeed when they should be rejected.(CVE-2026-80230)\n\nA flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup\nfor a given hostname even when using a different Native CA Store setting\n(`CURLSSLOPT_NATIVE_CA`) than when the connection was created.(CVE-2026-80231)\n\nWhen libpsl support is enabled, libcurl fails to enforce the Public Suffix\nList boundary check when processing a `Set-Cookie` header where the `Domain`\nattribute explicitly matches an origin host that is itself a public suffix\n(e.g., `Domain=co.uk` set by `co.uk`).\n\nInstead of coercing it into a strict host-only cookie, libcurl saves the\ncookie with wildcard domain scope (`.co.uk`). Consequently, the cookie is\ninappropriately included in subsequent outbound requests or HTTP redirects to\narbitrary sibling subdomains under the same public suffix (e.g.,\n`attacker.co.uk`).(CVE-2026-82209)","status":"published","published":"2026-09-25T01:28:47Z","modified":"2026-09-25T01:45:14.613657768Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4128","title":"curl security update","description":"cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols.\r\n\r\nSecurity Fix(es):\n\nSuccessfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`.(CVE-2026-11856)\n\nA flaw in the libcurl SASL negotiation for LDAP authentication allows an\nincomplete handshake sequence to be misinterpreted as a successful\ncryptographic verification. An attacker executing a Man-in-the-Middle (MITM)\nattack can inject a premature or shortcut response that bypasses complete peer\nvalidation.(CVE-2026-13608)\n\nA flaw in libcurl\u0026apos;s handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.(CVE-2026-18924)\n\nA flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B\u0026apos;s request get sent over user A\u0026apos;s\npreviously authenticated connection.(CVE-2026-19931)\n\nWhen `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable\nstandard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and\n`CURLOPT_SSL_VERIFYHOST = 0`), libcurl fails to enforce public key pinning on\nconnections established without a presented server certificate. Bypassing the\npinning check under these disabled-verification conditions allows\nunauthenticated connections to succeed when they should be rejected.(CVE-2026-80230)\n\nA flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup\nfor a given hostname even when using a different Native CA Store setting\n(`CURLSSLOPT_NATIVE_CA`) than when the connection was created.(CVE-2026-80231)\n\nWhen libpsl support is enabled, libcurl fails to enforce the Public Suffix\nList boundary check when processing a `Set-Cookie` header where the `Domain`\nattribute explicitly matches an origin host that is itself a public suffix\n(e.g., `Domain=co.uk` set by `co.uk`).\n\nInstead of coercing it into a strict host-only cookie, libcurl saves the\ncookie with wildcard domain scope (`.co.uk`). Consequently, the cookie is\ninappropriately included in subsequent outbound requests or HTTP redirects to\narbitrary sibling subdomains under the same public suffix (e.g.,\n`attacker.co.uk`).(CVE-2026-82209)","status":"published","published":"2026-09-25T01:28:47Z","modified":"2026-09-25T01:45:14.618674629Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2026:63161","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-22T10:17:20Z","modified":"2026-10-20T10:43:35.797896375Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:63514","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-22T10:17:27Z","modified":"2026-09-23T10:13:27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"UBUNTU-CVE-2026-18924","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:00Z","modified":"2026-10-17T12:59:54.025140092Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"AZL-99764","title":"CVE-2026-18924 affecting package curl for versions less than 8.11.1-12","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.480138Z"},{"id":"AZL-99780","title":"CVE-2026-18924 affecting package cmake 3.30.3-15","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20Z","modified":"2026-09-08T12:40:46.604237Z","updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"AZL-99801","title":"CVE-2026-18924 affecting package mysql 8.0.46-1","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20Z","modified":"2026-09-08T12:39:49.260496Z","updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"AZL-99834","title":"CVE-2026-18924 affecting package rust 1.75.0-30","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20Z","modified":"2026-09-08T12:39:52.444936Z","updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"AZL-99858","title":"CVE-2026-18924 affecting package rust 1.90.0-10","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20Z","modified":"2026-09-08T12:41:23.641007Z","updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"AZL-99879","title":"CVE-2026-18924 affecting package tensorflow 2.16.1-11","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-06T18:17:20Z","modified":"2026-09-08T12:39:40.540402Z","updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"CLSA-2026-1789475946","title":"Fix CVE(s): CVE-2026-18924","description":"   * SECURITY UPDATE: use-after-free in HTTP/2 server push transfers on shared\n     handles\n     - debian/patches/CVE-2026-18924.patch: make the duplicated handle created\n       for a server push stream inherit the share of its parent handle in\n       lib/http2.c\n     - CVE-2026-18924","status":"published","published":"2026-09-15T12:39:17Z","modified":"2026-10-26T09:31:40.146184211Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789566546","title":"Fix CVE(s): CVE-2026-18924","description":"   * SECURITY UPDATE: use-after-free when an HTTP/2 server push transfer is cleaned up while the parent handle uses a shared connection cache\n     - debian/patches/CVE-2026-18924.patch: use-after-free when an HTTP/2 server push transfer is cleaned up while the parent handle uses a shared connection cache\n     - CVE-2026-18924","status":"published","published":"2026-09-16T13:49:17Z","modified":"2026-10-26T09:31:53.72562936Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789899321","title":"curl: Fix of 3 CVEs","description":"- CVE-2026-18924: use-after-free in the cleanup of HTTP/2 server push\n  transfers, because a pushed transfer did not inherit the parent handle's\n  share and could therefore outlive a shared connection\n- CVE-2026-80230: public key pinning was not enforced when the server\n  presented no certificate and both peer and host verification were\n  disabled, so an unauthenticated connection succeeded where it should have\n  been rejected\n- CVE-2026-82209: a cookie whose Domain attribute exactly matched a public\n  suffix was stored with wildcard domain scope instead of being coerced to\n  host-only, so it was sent to arbitrary sibling subdomains under that\n  public suffix","status":"published","published":"2026-09-20T10:15:34Z","modified":"2026-10-26T09:31:43.857678471Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789899690","title":"curl: Fix of 3 CVEs","description":"- CVE-2026-18924: use-after-free in the cleanup of HTTP/2 server push\n  transfers, because a pushed transfer did not inherit the parent handle's\n  share and could therefore outlive a shared connection\n- CVE-2026-80230: public key pinning was not enforced when the server\n  presented no certificate and both peer and host verification were\n  disabled, so an unauthenticated connection succeeded where it should have\n  been rejected\n- CVE-2026-82209: a cookie whose Domain attribute exactly matched a public\n  suffix was stored with wildcard domain scope instead of being coerced to\n  host-only, so it was sent to arbitrary sibling subdomains under that\n  public suffix","status":"published","published":"2026-09-20T10:21:43Z","modified":"2026-10-26T09:31:51.524453288Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789899988","title":"curl: Fix of 3 CVEs","description":"- CVE-2026-18924: use-after-free in the cleanup of HTTP/2 server push\n  transfers, because a pushed transfer did not inherit the parent handle's\n  share and could therefore outlive a shared connection\n- CVE-2026-80230: public key pinning was not enforced when the server\n  presented no certificate and both peer and host verification were\n  disabled, so an unauthenticated connection succeeded where it should have\n  been rejected\n- CVE-2026-82209: a cookie whose Domain attribute exactly matched a public\n  suffix was stored with wildcard domain scope instead of being coerced to\n  host-only, so it was sent to arbitrary sibling subdomains under that\n  public suffix","status":"published","published":"2026-09-20T10:26:40Z","modified":"2026-10-26T09:30:55.755083325Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1789900215","title":"Fix CVE(s): CVE-2026-18924, CVE-2026-80230, CVE-2026-82209","description":"   * SECURITY UPDATE: HTTP/2 server push use-after-free\n     - debian/patches/CVE-2026-18924.patch: make a pushed transfer\n       inherit the parent handle's share in lib/http2.c, so a connection\n       held by a share cannot be freed while the pushed transfer still\n       uses it.\n     - CVE-2026-18924\n   * SECURITY UPDATE: public key pinning bypassed when no server certificate\n     - debian/patches/CVE-2026-80230.patch: in lib/vtls/openssl.c, treat\n       a missing server certificate as acceptable only when no pinned\n       public key is configured, so pinning is still enforced with peer\n       and host verification disabled.\n     - CVE-2026-80230\n   * SECURITY UPDATE: cookie for an exact PSL domain kept wildcard scope\n     - debian/patches/CVE-2026-82209.patch: in lib/cookie.c, clear the\n       tailmatch flag when a cookie's Domain attribute is itself a public\n       suffix, so it becomes host-only instead of being sent to sibling\n       subdomains.\n     - CVE-2026-82209","status":"published","published":"2026-09-20T10:30:28Z","modified":"2026-10-26T09:32:04.225824245Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790152441","title":"curl: Fix of 3 CVEs","description":"- CVE-2026-18924: use-after-free in the cleanup of HTTP/2 server push\n  transfers, because a pushed transfer did not inherit the parent handle's\n  share and could therefore outlive a shared connection\n- CVE-2026-80230: public key pinning was not enforced when the server\n  presented no certificate and both peer and host verification were\n  disabled, so an unauthenticated connection succeeded where it should have\n  been rejected\n- CVE-2026-82209: a cookie whose Domain attribute exactly matched a public\n  suffix was stored with wildcard domain scope instead of being coerced to\n  host-only, so it was sent to arbitrary sibling subdomains under that\n  public suffix\n- remove upstream test1701, which performs an HTTP/2 Upgrade on an HTTP/1.1\n  POST; nghttp2 1.43 no longer supports Upgrade requests carrying a body,\n  so the test fails against the nghttpx in the build root","status":"published","published":"2026-09-23T08:34:13Z","modified":"2026-10-26T09:31:36.037261546Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790154364","title":"curl: Fix of 3 CVEs","description":"- CVE-2026-18924: use-after-free in the cleanup of HTTP/2 server push\n  transfers, because a pushed transfer did not inherit the parent handle's\n  share and could therefore outlive a shared connection\n- CVE-2026-80230: public key pinning was not enforced when the server\n  presented no certificate and both peer and host verification were\n  disabled, so an unauthenticated connection succeeded where it should have\n  been rejected\n- CVE-2026-82209: a cookie whose Domain attribute exactly matched a public\n  suffix was stored with wildcard domain scope instead of being coerced to\n  host-only, so it was sent to arbitrary sibling subdomains under that\n  public suffix\n- remove upstream test1701, which performs an HTTP/2 Upgrade on an HTTP/1.1\n  POST; nghttp2 1.43 no longer supports Upgrade requests carrying a body,\n  so the test fails against the nghttpx in the build root","status":"published","published":"2026-09-23T09:06:16Z","modified":"2026-10-26T09:30:50.806870154Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CURL-CVE-2026-18924","title":"HTTP/2 server push UAF","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process.","status":"published","published":"2026-09-02T08:00:00Z","modified":"2026-10-25T01:05:14.973285028Z","updated_at":"2026-11-02T15:43:55.998148Z"},{"id":"MGASA-2026-0515","title":"Updated curl package fixes security vulnerabilities","description":"curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at\nhttps://curl.se/docs/security.html\nNot all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these\nare the ones that do:\nCVE-2026-86410: redirect to SFTP or SCP bypasses host verification\nCVE-2026-86412: server-set cookie erases cookie jar\nCVE-2026-86413: Negotiate credentials sent to redirected origin\nCVE-2026-86414: leaking host credentials to HTTP proxy\nCVE-2026-86415: auto client cert connection reuse mixup\nCVE-2026-87861: cross-origin reuse of a Negotiate connection\nCVE-2026-87862: HSTS cache import drops longer-lived child\nCVE-2026-87863: HSTS response erases persisted entries\nCVE-2026-92386: server-set cookie aborts cookie jar load\nCVE-2026-92387: never-ending loop via server response omission\nCVE-2026-92388: FTP wildcard write callback mixup\nCVE-2026-92389: TFTP direction confusion\nCVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints\nCVE-2026-92391: curl_mime_free stack overflow by recursion\nCVE-2026-92392: HTTP/2 upload Use-After-Free\nCVE-2026-94265: Authorization: Negotiate sent to foreign origin\nCVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL\nCVE-2026-107929: local interface connection reuse mixup\nThere were also some CVE IDs released at the same time that were fixed\nearlier, in 8.22.0, but just announced now:\nCVE-2026-86409: stale SigV4 headers sent unintended\nCVE-2026-86411: FTP connection reuse inherits client-certificate\nCVE-2026-87864: IMAP APPEND plus CRLF conversion command injection\nHere are the CVEs fixed in 8.22.0, which wasn't released in mga10 and so\nare only getting fixed now:\nCVE-2026-13608: OpenLDAP SASL authentication bypass\nCVE-2026-18924: HTTP/2 server push UAF\nCVE-2026-19931: Negotiate ambient user conn reuse\nCVE-2026-80229: OpenSSL provider use-after-free\nCVE-2026-80230: OpenSSL pinning bypass\nCVE-2026-80255: secure cookie attribute bypass with tab\nCVE-2026-82209: domain-scoped PSL domain cookie\n","status":"published","published":"2026-10-17T03:21:49Z","modified":"2026-10-17T03:43:01.411193688Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11696-1","title":"curl-8.22.0-1.1 on GA media","description":"These are all security issues fixed in the curl-8.22.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-07T00:00:00Z","modified":"2026-09-08T09:00:05.876145789Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"ROOT-OS-ALPINE-315-CVE-2026-18924","title":"CVE-2026-18924 in curl - Patched by Root","description":"Root has patched CVE-2026-18924 in the curl package for Root:Alpine:3.15. Multiple fixed versions available.","status":"published","published":"2026-11-04T10:54:49Z","modified":"2026-11-04T11:15:04.057507631Z","updated_at":"2026-11-04T11:38:21.953745Z"},{"id":"ROOT-OS-ALPINE-317-CVE-2026-18924","title":"CVE-2026-18924 in curl - Patched by Root","description":"Root has patched CVE-2026-18924 in the curl package for Root:Alpine:3.17. Multiple fixed versions available.","status":"published","published":"2026-11-04T16:15:55Z","modified":"2026-11-04T17:15:24.270477224Z","updated_at":"2026-11-04T17:43:22.558805Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2026-18924","title":"CVE-2026-18924 in curl - Patched by Root","description":"Root has patched CVE-2026-18924 in the curl package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:40:45Z","modified":"2026-09-29T10:16:07.802991957Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-321-CVE-2026-18924","title":"CVE-2026-18924 in curl - Patched by Root","description":"Root has patched CVE-2026-18924 in the curl package for Root:Alpine:3.21. Multiple fixed versions available.","status":"published","published":"2026-11-03T11:37:01Z","modified":"2026-11-03T12:15:04.056581965Z","updated_at":"2026-11-03T12:31:35.467775Z"},{"id":"ROOT-OS-ALPINE-322-CVE-2026-18924","title":"CVE-2026-18924 in curl - Patched by Root","description":"Root has patched CVE-2026-18924 in the curl package for Root:Alpine:3.22. Multiple fixed versions available.","status":"published","published":"2026-10-19T06:56:08Z","modified":"2026-10-19T07:15:05.135767684Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-18924","title":"CVE-2026-18924 in curl - Patched by Root","description":"Root has patched CVE-2026-18924 in the curl package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-11-04T06:00:50Z","modified":"2026-11-04T07:15:08.011237805Z","updated_at":"2026-11-04T07:32:10.855619Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-18924","title":"CVE-2026-18924 in curl - Patched by Root","description":"Root has patched CVE-2026-18924 in the curl package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-11-03T10:50:30Z","modified":"2026-11-03T11:15:09.888801471Z","updated_at":"2026-11-03T11:30:16.221977Z"},{"id":"SUSE-SU-2026:4954-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414).\n- CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426).\n- CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477).\n- CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478).\n- CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482).\n- CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173).\n- CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031).\n- CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030).\n- CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026).\n- CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023).\n- CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022).\n- CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021).\n- CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018).\n- CVE-2026-92387: never-ending loop via server response omission (bsc#1285017).\n- CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016).\n- CVE-2026-92389: TFTP direction confusion (bsc#1285015).\n- CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014).\n- CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013).\n- CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012).\n- CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010).\n- CVE-2026-107929: local interface connection reuse mixup (bsc#1285008).\n","status":"published","published":"2026-10-30T16:20:13Z","modified":"2026-11-02T17:23:10.113104458Z","updated_at":"2026-11-02T18:00:32.560004Z"},{"id":"SUSE-SU-2026:5068-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414).\n- CVE-2026-9546: sending old referer (bsc#1268419).\n- CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423).\n- CVE-2026-11564: Native CA trust persist (bsc#1268424).\n- CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425).\n- CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426).\n- CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).\n- CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477).\n- CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478).\n- CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482).\n- CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173).\n- CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031).\n- CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030).\n- CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029).\n- CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028).\n- CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027).\n- CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026).\n- CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024).\n- CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023).\n- CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022).\n- CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021).\n- CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018).\n- CVE-2026-92387: never-ending loop via server response omission (bsc#1285017).\n- CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016).\n- CVE-2026-92389: TFTP direction confusion (bsc#1285015).\n- CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014).\n- CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013).\n- CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012).\n- CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011).\n- CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010).\n- CVE-2026-107929: local interface connection reuse mixup (bsc#1285008).\n  \nChanges for curl:\n\n- Updated curl to version 8.22.0. (jsc#PED-16984)\n","status":"published","published":"2026-11-03T08:13:17Z","modified":"2026-11-03T22:45:04.218292646Z","updated_at":"2026-11-03T22:59:30.419462Z"},{"id":"SUSE-SU-2026:5069-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414).\n- CVE-2026-9546: sending old referer (bsc#1268419).\n- CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423).\n- CVE-2026-11564: Native CA trust persist (bsc#1268424).\n- CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425).\n- CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426).\n- CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).\n- CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477).\n- CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478).\n- CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482).\n- CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173).\n- CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031).\n- CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030).\n- CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029).\n- CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028).\n- CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027).\n- CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026).\n- CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024).\n- CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023).\n- CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022).\n- CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021).\n- CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018).\n- CVE-2026-92387: never-ending loop via server response omission (bsc#1285017).\n- CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016).\n- CVE-2026-92389: TFTP direction confusion (bsc#1285015).\n- CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014).\n- CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013).\n- CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012).\n- CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011).\n- CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010).\n- CVE-2026-107929: local interface connection reuse mixup (bsc#1285008).\n\nChanges for curl:\n\n- Updated to version 8.22.0. (jsc#PED-16984)\n","status":"published","published":"2026-11-03T08:13:44Z","modified":"2026-11-03T22:45:05.964085219Z","updated_at":"2026-11-03T22:59:30.419462Z"},{"id":"USN-8820-1","title":"curl vulnerabilities","description":"Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for\nLDAP authentication in certain circumstances. A machine-in-the-middle\nattacker could possibly use this issue to bypass peer validation. This\nissue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS.\n(CVE-2026-13608)\n\nStephan Zeisberg discovered that curl incorrectly handled HTTP/2 Server\nPush streams when sharing connections between handles. A remote attacker\ncould possibly use this issue to cause curl to crash, resulting in a denial\nof service, or execute arbitrary code. (CVE-2026-18924)\n\nStanislav Fort discovered that curl incorrectly managed the lifetime of\npooled TLS connections when using the multi interface. An attacker could\npossibly use this issue to cause curl to crash, resulting in a denial of\nservice, or execute arbitrary code. This issue only affected Ubuntu 26.04\nLTS. (CVE-2026-80229)\n\nStanislav Fort discovered that curl did not properly enforce public key\npinning when certificate verification was disabled in certain\ncircumstances. A remote attacker could possibly use this issue to bypass\npinning checks and cause curl to accept connections that should have been\nrejected. (CVE-2026-80230)\n\nStanislav Fort discovered that curl incorrectly handled the Secure\nattribute of cookies in certain circumstances. A remote attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 26.04 LTS. (CVE-2026-80255)\n\nStanislav Fort discovered that curl did not properly enforce Public\nSuffix List boundaries when handling cookies in certain circumstances. A\nremote attacker could possibly use this issue to cause cookies to be sent\nto unrelated domains, resulting in sensitive information being exposed.\nThis issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-82209)\n\nAdy Elouej discovered that curl did not clear proxy authentication state\nbetween requests when reusing a handle with environment-variable proxy\nconfiguration. A remote attacker could possibly use this issue to obtain\nsensitive credentials. This issue was previously fixed in USN-8487-1, but\nthat fix was incomplete for Ubuntu 16.04 LTS. (CVE-2026-8927)","status":"published","published":"2026-09-24T20:13:19Z","modified":"2026-09-26T04:41:35.074747182Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}