CVE-2026-18924

CVE-2026-18924 affects libcurl versions 7.44.0 through 8.21.x , fixed in 8.22.0 . The vulnerability is a use-after-free in the cleanup process when handling HTTP/2 Server Push streams, triggered specifically when the parent handle is configured to share connections with other handles. A HackerOne...