Curl information disclosure vulnerability

Versions 8.21.0 and 8.22.0 of curl contain an information disclosure vulnerability. This vulnerability arises when, during the use of environment user credentials, an HTTP request directed at a source may be sent via a previously authenticated Negotiate connection to a different source, resulting...