Curl moves low and medium vulnerability reports public on October 26
High and critical reports stay private; Stenberg says over 90 percent of recent submissions were below high.
52
- Mentions · 7d0
- Mentions · 30d4
- All mentions5
- First seenAug 31, 2026
- Last mentioned10d ago
Timeline
5 articles · newest first[SECURITY ADVISORIES] curl 8.23.0
curl 8.23.0 fixes high-severity HTTP/2 upload use-after-free CVE-2026-92392.
68
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
curl 8.23.0 fixes high-severity HTTP/2 use-after-free CVE-2026-92392 after a PoC showed client code execution.
66
USN-8927-1: curl vulnerabilities
Ubuntu’s USN-8927-1 patches curl flaws that may leak data or reuse the wrong network interface.
38
curl: a CVE dispute
curl maintainer Daniel Stenberg details a dispute over a CVE assigned to the curl project.
28
Related CVEs
by mentions- CVE-2026-923921%8.1HTTP/2 upload use-after-free in curl
- When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding…
- When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.