Twenty-two pending curl vulnerabilities
Curl 8.23.0, due October 14, will fix 22 flaws including high-severity CVE-2026-92392.
The curl project will release curl 8.23.0 on October 14, 2026, ahead of schedule, to fix 22 security vulnerabilities. One issue, CVE-2026-92392, is rated HIGH, a rating the project has given only twice since 2021, most recently for heap overflow CVE-2023-38545. Technical details stay embargoed until the release; the distros list and paying support customers will be warned early. Maintainer Daniel Stenberg plans a later post on how the flaw is triggered and how it is fixed.
72