29231 matches found
UBUNTU-CVE-2026-82209
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
UBUNTU-CVE-2026-13608
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...
UBUNTU-CVE-2026-80255
A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...
CVE-2026-80229
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
MINI-CPVM-JQC8-6RHJ
Bulletin has no description...
MINI-7Q9F-7X8F-8793
Bulletin has no description...
MINI-GVJJ-8953-F4RH
Bulletin has no description...
MINI-4QH3-VH38-C74R
Bulletin has no description...
MINI-85MV-5R7F-Q46R
Bulletin has no description...
CVE-2026-86214
creationtimestamp| type| source ---|---|--- 2026-09-06 13:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7zcn2pbg7tqql...
MINI-GX2F-48J4-33MX
Bulletin has no description...
Exploit for CVE-2026-6279
No d...
MINI-H749-XMP9-62H4
Bulletin has no description...
MINI-8XFF-V7C7-XCP4
Bulletin has no description...
MINI-JCG4-5X9C-RM48
Bulletin has no description...
MINI-P3VJ-WXPF-88MV
Bulletin has no description...
OSV-2026-1235 UNKNOWN READ in renumber_by_map
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=557283672 Crash type: UNKNOWN READ Crash state: renumberbymap renumberbymap disablenonamegroupcapture...
