CVE-2026-87863

The curl tool is vulnerable to data loss when persistent HTTP Strict Transport Security (HSTS) caching is enabled. An authenticated HTTPS origin can provide an extreme max-age value that the parser accepts but fails during time serialization on 64-bit systems. Because curl truncates the original ...