CVE-2026-4873

A logic error in cURL and libcurl allows the software to incorrectly reuse an existing unencrypted connection from a connection pool when a TLS-required connection is requested. If an initial transfer is conducted in clear-text (e.g., via IMAP , SMTP , or POP3 ), subsequent requests to the same h...

connection reuse ignores TLS requirement

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...

clang-extra remote code execution vulnerability

clang-extra is a tool for installing LLVM. A security vulnerability exists in clang-extra, which originates when the program downloads an executable file over an unencrypted HTTP connection. A remote attacker can exploit the vulnerability by intercepting the response and replacing the requested...