Most recent entries from all

BELL-CVE-2026-82208

2026-10-05T11:19:52.408399+00:00

Affected: Alpaquita:23: curl, Alpaquita:25: curl, Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl

certfr-2026-avi-1108 — De multiples vulnérabilités ont été découvertes dans Curl. Certaines d'entre elles permettent à un attaquant de provoqu…

2026-10-05T11:19:52.408624+00:00

certfr-2026-avi-1108

fkie_cve-2026-82208

2026-10-05T11:19:52.408682+00:00

With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectly accepted.

GHSA-8rq8-f59m-9cjg

2026-10-05T11:19:52.408740+00:00

msrc_CVE-2026-82208 — wolfSSL CA-cache hit overrides callback

2026-10-05T11:19:52.408780+00:00

msrc_CVE-2026-82208

Withdrawn: UBUNTU-CVE-2026-82208

2026-10-05T11:19:52.408807+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: curl, Ubuntu:Pro:16.04:LTS: curl, Ubuntu:Pro:18.04:LTS: curl, Ubuntu:Pro:20.04:LTS: curl, Ubuntu:22.04:LTS: curl, Ubuntu:24.04:LTS: curl, Ubuntu:26.04:LTS: curl

[Unknown description]