ROOT-OS-DEBIAN-13-CVE-2026-82209 CVE-2026-82209 in curl - Patched by Root

Root has patched CVE-2026-82209 in the curl package for Root:Debian:13. Multiple fixed versions available...

DEBIAN-CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

UBUNTU-CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

SUSE CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

CVE-2026-82209

creationtimestamp| type| source ---|---|--- 2026-09-02 12:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k 2026-09-09 20:01:31+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mv4dcnqryc2u...