5 matches found
CVE-2026-8932
🚨 CVE-2026-8932 - O Bug de Segurança Mais Antigo do libcurl Correspondência de Configuração mTLS Incompleta no libcurl A vulnerabilidade de segurança mais antiga já corrigida no libcurl—permanecendo despercebida por mais de 25 anos. 📖 Visão Geral CVE-2026-8932 é uma vulnerabilidade de segurança n...
AZL-91827 CVE-2026-8932 affecting package cmake for versions less than 3.30.3-15
libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS...
CVE-2022-31183
fs2 is a compositional, streaming I/O library for Scala. When establishing a server-mode TLSSocket using fs2-io on Node.js, the parameter requestCert = true is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. fs2-io running on...
