curl: CVE-2026-87862: HSTS cache import drops longer-lived child

HSTS cache import silently drops a longer-lived child beneath an includeSubDomains parent Summary Loading an HSTS cache file or CURLOPTHSTSREADFUNCTION callback can silently discard a child entry. When a live includeSubDomains parent is imported before a longer-lived includeSubDomains child, only...