CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a "Set-Cookie" header where the "Domain" attribute explicitly matches an origin host that is itself a public suffix e.g., "Domain=co.uk" set by "co.uk". Instead of coercing it into a...