1 matches found
curl: CVE-2026-111952: OpenSSL provider use-after-free again
Summary Since 8.23.0, libcurl caches its OpenSSL certificate store per multi handle even when CURLOPTCAPATH is set. OpenSSL loads CApath certificates lazily during verification, and they belong to the library context of the transfer that loaded them. With CURLOPTSSLENGINE that is a private...
6.6AI score
SaveExploits0
20