{"id":"CVE-2026-3805","aliases":["ALPINE-CVE-2026-3805","BELL-CVE-2026-3805","CURL-CVE-2026-3805","DEBIAN-CVE-2026-3805","EUVD-2026-11141","GHSA-2289-hhfc-p684","JLSEC-2026-439","RHSA-2026:6893","ROOT-OS-ALPINE-320-CVE-2026-3805","ROOT-OS-ALPINE-321-CVE-2026-3805","ROOT-OS-ALPINE-322-CVE-2026-3805","ROOT-OS-DEBIAN-13-CVE-2026-3805","SUSE-SU-2026:0879-1","SUSE-SU-2026:0885-1","SUSE-SU-2026:0903-1","SUSE-SU-2026:0911-1","SUSE-SU-2026:20668-1","SUSE-SU-2026:20722-1","SUSE-SU-2026:20760-1","SUSE-SU-2026:20918-1","UBUNTU-CVE-2026-3805","USN-8084-1","openSUSE-SU-2026:10371-1","openSUSE-SU-2026:20404-1"],"status":"published","title":"use after free in SMB connection reuse","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00896,"percentile":0.59984,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-416"],"published":"2026-03-11T08:00:00Z","modified":"2026-10-28T10:55:09Z","exploits":[{"source":"pocgithub","id":"Rat5ak/CVE-2026-3805-curl-SMB-UAF","title":"Rat5ak/CVE-2026-3805-curl-SMB-UAF","date":"2026-04-12","url":"https://github.com/Rat5ak/CVE-2026-3805-curl-SMB-UAF"}],"fixes":[{"ecosystem":"Alpine:v3.21","package":"curl","fixed_in":["8.14.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"curl","fixed_in":["8.14.1-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"curl","fixed_in":["8.19.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"curl","fixed_in":["8.19.0-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"curl","fixed_in":["8.14.1-r4"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"curl","fixed_in":["8.19.0-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"curl","fixed_in":["8.19.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"curl","fixed_in":["8.14.1-2+deb13u4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"curl","fixed_in":["8.19.0-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"CURL_jll","fixed_in":["8.20.0+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibCURL_jll","fixed_in":["8.19.0+0"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"curl","fixed_in":["8.14.1-r20076","8.14.1-r20077","8.14.1-r20078","8.14.1-r20079","8.14.1-r200710","8.14.1-r200711","8.14.1-r200712"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-curl","fixed_in":["8.14.1-r20076","8.14.1-r20077","8.14.1-r20078","8.14.1-r20079","8.14.1-r200710","8.14.1-r200711","8.14.1-r200712"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.21","package":"curl","fixed_in":["8.14.1-r20073","8.14.1-r20074","8.14.1-r20075","8.14.1-r20076","8.14.1-r20077"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.21","package":"rootio-curl","fixed_in":["8.14.1-r20073","8.14.1-r20074","8.14.1-r20075","8.14.1-r20076","8.14.1-r20077"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.22","package":"curl","fixed_in":["8.14.1-r20072","8.14.1-r20071","8.14.1-r20073","8.14.1-r20074","8.14.1-r30075","8.14.1-r30076","8.14.1-r30077","8.14.1-r30078","8.14.1-r30079"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.22","package":"rootio-curl","fixed_in":["8.14.1-r20072","8.14.1-r20071","8.14.1-r20073","8.14.1-r20074","8.14.1-r30075","8.14.1-r30076","8.14.1-r30077","8.14.1-r30078","8.14.1-r30079"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"curl","fixed_in":["8.14.1-2ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.13.0"},{"fixed":"8.14.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.13.0"},{"fixed":"8.14.1-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.13.0"},{"fixed":"8.19.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.13.0"},{"fixed":"8.19.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.14.0-r1"},{"fixed":"8.14.1-r4"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.13.0-r0"},{"fixed":"8.19.0-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.13.0-r0"},{"fixed":"8.19.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-2+deb13u4"}]}],"versions":["8.14.1-2","8.14.1-2+deb13u1","8.14.1-2+deb13u2","8.14.1-2+deb13u2~bpo13+1","8.14.1-2+deb13u3"]},{"source":"osv","ecosystem":"Debian:14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.0-1"}]}],"versions":["8.14.1-2","8.14.1-2+exp1","8.15.0-1","8.15.0-1~bpo13+1","8.15.0-1~exp1","8.15.0~rc1-1exp1","8.15.0~rc2-1~exp1","8.15.0~rc3-1~exp1","8.16.0-1","8.16.0-1+exp1","8.16.0-1~bpo13+1","8.16.0-2","8.16.0-3","8.16.0-4","8.16.0-4~bpo13+1","8.16.0~rc1-1~exp1","8.16.0~rc2-1","8.16.0~rc2-2","8.16.0~rc3-1","8.17.0-1","8.17.0-2","8.17.0-3","8.17.0~rc1-1~exp1","8.17.0~rc2-1","8.17.0~rc3-1","8.18.0-1","8.18.0-1~bpo13+1","8.18.0-2","8.18.0~rc1-1+exp1","8.18.0~rc2-1","8.18.0~rc3-1","8.19.0-1~bpo13+1","8.19.0~rc1-1~exp1","8.19.0~rc2-1","8.19.0~rc2-2","8.19.0~rc3-1"]},{"source":"osv","ecosystem":"Julia","package":"CURL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"8.13.0+0"},{"fixed":"8.20.0+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"LibCURL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"8.13.0+0"},{"fixed":"8.19.0+0"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.19.0-3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.19.0-3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.19.0-3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcurl-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.19.0-3.hum1"}]}],"bundled":13},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r20076"},{"fixed":"8.14.1-r20077"},{"fixed":"8.14.1-r20078"},{"fixed":"8.14.1-r20079"},{"fixed":"8.14.1-r200710"},{"fixed":"8.14.1-r200711"},{"fixed":"8.14.1-r200712"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r20076"},{"fixed":"8.14.1-r20077"},{"fixed":"8.14.1-r20078"},{"fixed":"8.14.1-r20079"},{"fixed":"8.14.1-r200710"},{"fixed":"8.14.1-r200711"},{"fixed":"8.14.1-r200712"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.21","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r20073"},{"fixed":"8.14.1-r20074"},{"fixed":"8.14.1-r20075"},{"fixed":"8.14.1-r20076"},{"fixed":"8.14.1-r20077"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.21","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r20073"},{"fixed":"8.14.1-r20074"},{"fixed":"8.14.1-r20075"},{"fixed":"8.14.1-r20076"},{"fixed":"8.14.1-r20077"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.22","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r20072"},{"fixed":"8.14.1-r20071"},{"fixed":"8.14.1-r20073"},{"fixed":"8.14.1-r20074"},{"fixed":"8.14.1-r30075"},{"fixed":"8.14.1-r30076"},{"fixed":"8.14.1-r30077"},{"fixed":"8.14.1-r30078"},{"fixed":"8.14.1-r30079"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.22","package":"rootio-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-r20072"},{"fixed":"8.14.1-r20071"},{"fixed":"8.14.1-r20073"},{"fixed":"8.14.1-r20074"},{"fixed":"8.14.1-r30075"},{"fixed":"8.14.1-r30076"},{"fixed":"8.14.1-r30077"},{"fixed":"8.14.1-r30078"},{"fixed":"8.14.1-r30079"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150200.4.103.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150600.4.40.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150600.4.40.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150600.4.40.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150700.7.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-150400.5.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-slfo.1.1_6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-160000.5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-160000.5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"curl-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-160000.5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-160000.5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"curl-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-160000.5.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-2ubuntu1.2"}]}],"versions":["8.12.1-3ubuntu1","8.13.0-5ubuntu1","8.14.1-1ubuntu2","8.14.1-1ubuntu3","8.14.1-2ubuntu1","8.14.1-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.81.0-1ubuntu1.23"}]}],"versions":["7.74.0-1.3ubuntu2","7.74.0-1.3ubuntu3","7.80.0-3","7.81.0-1","7.81.0-1ubuntu1.1","7.81.0-1ubuntu1.2","7.81.0-1ubuntu1.3","7.81.0-1ubuntu1.4","7.81.0-1ubuntu1.6","7.81.0-1ubuntu1.7","7.81.0-1ubuntu1.8","7.81.0-1ubuntu1.10","7.81.0-1ubuntu1.11","7.81.0-1ubuntu1.13","7.81.0-1ubuntu1.14","7.81.0-1ubuntu1.15","7.81.0-1ubuntu1.16","7.81.0-1ubuntu1.17","7.81.0-1ubuntu1.18","7.81.0-1ubuntu1.19","7.81.0-1ubuntu1.20","7.81.0-1ubuntu1.21","7.81.0-1ubuntu1.22"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.0-2ubuntu10.8"}]}],"versions":["8.2.1-1ubuntu3","8.2.1-1ubuntu3.1","8.4.0-2ubuntu1","8.5.0-2ubuntu1","8.5.0-2ubuntu2","8.5.0-2ubuntu8","8.5.0-2ubuntu9","8.5.0-2ubuntu10","8.5.0-2ubuntu10.1","8.5.0-2ubuntu10.2","8.5.0-2ubuntu10.3","8.5.0-2ubuntu10.4","8.5.0-2ubuntu10.5","8.5.0-2ubuntu10.6","8.5.0-2ubuntu10.7"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-2ubuntu1.2"}]}],"versions":["8.12.1-3ubuntu1","8.13.0-5ubuntu1","8.14.1-1ubuntu2","8.14.1-1ubuntu3","8.14.1-2ubuntu1","8.14.1-2ubuntu1.1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.19.0-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.14.1-160000.5.1"}]}],"bundled":4}],"products":[{"vendor":"curl","product":"curl"},{"vendor":"haxx","product":"curl"}],"references":[{"url":"https://curl.se/docs/CVE-2026-3805.json","tags":["Vendor Advisory","web","article"]},{"url":"https://curl.se/docs/CVE-2026-3805.html","tags":["Patch","Vendor Advisory","web","article","report"]},{"url":"https://hackerone.com/reports/3591944","tags":["Exploit","Issue Tracking","Third Party Advisory","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2026/03/11/4","tags":["Mailing List","Third Party Advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3805","tags":["advisory","web"]},{"url":"https://github.com/advisories/GHSA-2289-hhfc-p684","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-3805","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-3805","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3805.json","tags":["advisory"]},{"url":"https://github.com/curl/curl.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-3805","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6893","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9086","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10148","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10966","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15224","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15079","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14819","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14524","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13034","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3805","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3783","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3784","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1965","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14017","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6893.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9086","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2025-9086.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2025-9086.json","tags":["article"]},{"url":"https://github.com/curl/curl/commit/c6ae07c6a541e0e96d0040afb6","tags":["article"]},{"url":"https://hackerone.com/reports/3294999","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10148","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2025-10148.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2025-10148.json","tags":["article"]},{"url":"https://hackerone.com/reports/3330839","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2413308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10966","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/11/05/2","tags":["article"]},{"url":"https://curl.se/docs/CVE-2025-10966.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2025-10966.json","tags":["article"]},{"url":"https://github.com/curl/curl/commit/b011e3fcfb06d6c027859","tags":["article"]},{"url":"https://hackerone.com/reports/3355218","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2426406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13034","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427870","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14017","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14017","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2025-14017.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2025-14017.json","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2426407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14524","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2426408","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14819","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14819","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2025-14819.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2426409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15079","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15079","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2426410","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15224","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1965","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2026-1965.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-1965.json","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446450","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3783","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/03/11/2","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-3783.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-3783.json","tags":["article"]},{"url":"https://hackerone.com/reports/3583983","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3784","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/03/11/3","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-3784.html","tags":["article"]},{"url":"https://curl.se/docs/CVE-2026-3784.json","tags":["article"]},{"url":"https://hackerone.com/reports/3584903","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3805","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260879-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259362","tags":["report"]},{"url":"https://bugzilla.suse.com/1259363","tags":["report"]},{"url":"https://bugzilla.suse.com/1259364","tags":["report"]},{"url":"https://bugzilla.suse.com/1259365","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3805","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260885-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260903-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260911-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620668-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620722-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620760-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620918-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-3805","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8084-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-0167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-3784","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-3805","title":"use after free in SMB connection reuse","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T10:09:37.729Z","modified":"2026-09-15T06:02:55.871Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416","CWE-416"],"updated_at":"2026-11-02T13:49:09.229322Z"}],"euvd":[{"id":"EUVD-2026-11141","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T10:09:37Z","modified":"2026-09-15T06:02:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:19.01786Z"}],"ghsa":[{"id":"GHSA-2289-hhfc-p684","title":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer...","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T12:31:22Z","modified":"2026-03-11T18:31:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:06:34.428268Z"}],"nvd":[{"id":"CVE-2026-3805","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T11:16:00.967Z","modified":"2026-09-14T21:17:06.383Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:12:08.98071Z"}],"osv":[{"id":"ALPINE-CVE-2026-3805","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T11:16:00.967Z","modified":"2026-10-18T12:30:04.086093527Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-3805","status":"published","published":"2026-03-13T06:08:18.993069Z","modified":"2026-03-17T07:22:52.972506Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"CVE-2026-3805","title":"use after free in SMB connection reuse","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T10:09:37.729Z","modified":"2026-10-28T10:55:09.18065611Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:45:03.040464Z"},{"id":"DEBIAN-CVE-2026-3805","description":"When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T11:16:00.967Z","modified":"2026-10-01T03:03:22.383048655Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:54.587575Z"},{"id":"JLSEC-2026-439","title":"When doing a second SMB request to the same host again, curl would wrongly use a data pointer...","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","status":"published","published":"2026-05-04T13:12:06.605Z","modified":"2026-07-18T00:01:59.57326731Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"RHSA-2026:6893","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:10:50Z","modified":"2026-10-16T10:23:46Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2026-3805","title":"CVE-2026-3805 in curl - Patched by Root","description":"Root has patched CVE-2026-3805 in the curl package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:40:45Z","modified":"2026-09-29T10:15:09.338974096Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-ALPINE-321-CVE-2026-3805","title":"CVE-2026-3805 in curl - Patched by Root","description":"Root has patched CVE-2026-3805 in the curl package for Root:Alpine:3.21. Multiple fixed versions available.","status":"published","published":"2026-10-07T06:27:29Z","modified":"2026-10-07T07:15:05.47853691Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-ALPINE-322-CVE-2026-3805","title":"CVE-2026-3805 in curl - Patched by Root","description":"Root has patched CVE-2026-3805 in the curl package for Root:Alpine:3.22. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:36:08Z","modified":"2026-09-29T10:15:12.251389675Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-3805","title":"CVE-2026-3805 in rootio-curl - Patched by Root","description":"Root has patched CVE-2026-3805 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-07-10T15:43:44Z","modified":"2026-07-13T14:00:21.240366457Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:33.415244Z"},{"id":"UBUNTU-CVE-2026-3805","description":"When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T18:00:00Z","modified":"2026-04-22T16:32:19.700354Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"CURL-CVE-2026-3805","title":"use after free in SMB connection reuse","description":"When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.","status":"published","published":"2026-03-11T08:00:00Z","modified":"2026-10-25T01:05:18.561428949Z","updated_at":"2026-11-02T15:43:55.998148Z"},{"id":"openSUSE-SU-2026:10371-1","title":"curl-8.19.0-1.1 on GA media","description":"These are all security issues fixed in the curl-8.19.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-14T00:00:00Z","modified":"2026-03-15T11:45:25.123527Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20404-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-20T09:36:45Z","modified":"2026-03-29T17:25:00.057598Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:0879-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-12T10:04:20Z","modified":"2026-03-13T08:50:09.673568Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:0885-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-12T14:50:17Z","modified":"2026-03-13T08:51:12.24607Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:0903-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-17T10:04:47Z","modified":"2026-03-18T08:45:40.462062Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:0911-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-17T19:56:50Z","modified":"2026-03-19T08:45:07.296307Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:20668-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-12T10:04:10Z","modified":"2026-03-23T04:53:07.311083Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20722-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-12T09:40:37Z","modified":"2026-03-23T04:53:09.181751Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20760-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-20T09:37:16Z","modified":"2026-03-25T17:23:46.030906Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20918-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n","status":"published","published":"2026-03-20T09:37:16Z","modified":"2026-04-02T17:24:02.443084Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"USN-8084-1","title":"curl vulnerabilities","description":"Zhicheng Chen discovered that curl could incorrectly reuse the wrong\nconnection for Negotiate-authenticated HTTP or HTTPS requests. This could\nresult in the use of credentials from a different connection, contrary to\nexpectations. (CVE-2026-1965)\n\nIt was discovered that curl incorrectly leaked OAuth2 bearer tokens when\nfollowing a redirect. This could result in tokens being sent to the wrong\nhost, contrary to expectations. (CVE-2026-3783)\n\nMuhamad Arga Reksapati discovered that curl incorrectly reused existing\nHTTP proxy connections even if the request used different credentials. This\ncould result in the use of incorrect credentials, contrary to expectations.\n(CVE-2026-3784)\n\nDaniel Wade discovered that curl incorrectly handled certain memory\noperations when doing a second SMB request to the same host. An attacker\ncould use this issue to cause curl to crash, resulting in a denial of\nservice, or possibly execute arbitrary code. This issue only affected\nUbuntu 25.10. (CVE-2026-3805)\n\nYihang Zhou discovered that curl incorrectly reused .netrc file credentials\nwhen following redirects. This could result in the use of credentials for\na different host, contrary to expectations. This issue only affected Ubuntu\n22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-0167)","status":"published","published":"2026-03-11T12:11:15Z","modified":"2026-04-27T18:47:20.575043315Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}